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ABSTRACT 

Quantum Stabilizer Codes and Beyond. (August 2008) 
Pradeep Kiran Sarvepalli, B.Tech., Indian Institute of Technology, Madras; 

M.S., Texas A&M University 
Chair of Advisory Committee: Dr. Andreas Klappenecker 

The importance of quantum error correction in paving the way to build a practical 
quantum computer is no longer in doubt. Despite the large body of literature in quantum 
coding theory, many important questions, especially those centering on the issue of "good 
codes" are unresolved. In this dissertation the dominant underlying theme is that of con- 
structing good quantum codes. It approaches this problem from three rather different but 
not exclusive strategies. Broadly, its contribution to the theory of quantum error correction 
is threefold. 

Firstly, it extends the framework of an important class of quantum codes - nonbi- 
nary stabilizer codes. It clarifies the connections of stabilizer codes to classical codes over 
quadratic extension fields, provides many new constructions of quantum codes, and devel- 
ops further the theory of optimal quantum codes and punctured quantum codes. In partic- 
ular it provides many explicit constructions of stabilizer codes, most notably it simplifies 
the criteria by which quantum BCH codes can be constructed from classical codes. 

Secondly, it contributes to the theory of operator quantum error correcting codes also 
called as subsystem codes. These codes are expected to have efficient error recovery 
schemes than stabilizer codes. Prior to our work however, systematic methods to construct 
these codes were few and it was not clear how to fairly compare them with other classes of 
quantum codes. This dissertation develops a framework for study and analysis of subsys- 
tem codes using character theoretic methods. In particular, this work established a close 
link between subsystem codes and classical codes and it became clear that the subsystem 
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codes can be constructed from arbitrary classical codes. 

Thirdly, it seeks to exploit the knowledge of noise to design efficient quantum codes 
and considers more realistic channels than the commonly studied depolarizing channel. 
It gives systematic constructions of asymmetric quantum stabilizer codes that exploit the 
asymmetry of errors in certain quantum channels. This approach is based on a Calderbank- 
Shor-Steane construction that combines BCH and finite geometry LDPC codes. 
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CHAPTER I 
INTRODUCTION 

A. Motivation 

In the 1980s and 1990s, it gradually became apparent that the theory of information founded 
by Claude Shannon was a purely classical theory in that it did not take into account quan- 
tum mechanics. This realization crystallized the notion of quantum information as distinct 
from classical information. Despite the success of the abstract formulation of information 
by Shannon, it is far more physical* than it appears. The representation of information i.e., 
the mechanism/device used to store does affect its behavior. Two level systems such as a 
switches or more realistically transistors can be used to store and manipulate classical bits. 
One can also use systems such as photons or electrons. In case of photons for instance, 
information maybe stored on the polarization of the photon. The photon can be vertically 
or horizontally polarized. Other quantum mechanical systems such as spin-| systems i.e., 
systems with two spin states can also be used for representing information. These quantum 
mechanical representations give us something more than what we bargained for. Because 
they operate in a regime where the quantum mechanical effects can come into play^ in ad- 
dition to representing the usual logical states they permit phenomena (such as linear com- 
bination of the logical states), which have no classical analogues. These phenomena seem 
to confer additional power when it comes to information processing. A far reaching ram- 

The journal model is IEEE Transactions on Information Theory. 
*R. Landauer. 

^It might be argued that quantum mechanical effects are present even when information 
is stored on a transistor (or any other device). That is true, however, when we speak of 
quantum mechanical effects we are not so much interested as to how they affect the func- 
tioning of the device as much as how they affect the logical state of the device. In so far as 
the logical state is considered, the transistor behaves classically. 
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ification due to differences between quantum and classical information is that computers 
processing quantum information, if they were built, could provide exponential speedups 
over computers that process classical information alone. For instance, Shor's algorithm 
for factoring integers provides an exponential speedup over the best known classical algo- 
rithms. A little less dramatically, Grover's search algorithm provides a quadratic speedup 
over its classical counterparts. Quantum computers therefore pose a challenge to one of the 
central tenets in theoretical computer science - the (modem) Church-Turing thesis which 
states: 

Any reasonable model of computation can be simulated on a (probabilistic) 
Turing machine with at most a polynomial overhead, (see [25, 153]). 

It must be emphasized that quantum computers cannot solve problems that are not solvable 
on classical computers, for the simple reason that a quantum computer can be simulated on 
a classical computer albeit with exponential slowdown. Quantum computers can potentially 
change the landscape of tractable problems. But to realize their promise we have one 
important hurdle to cross - which is the central theme of this dissertation - that of protecting 
quantum information. 

B. Quantum Error Correction 

A quantum computer that can implement something nontrivial and useful as Shor's algo- 
rithm would require the control and manipulation of a large number of sensitive quantum 
mechanical systems. Any practical quantum computer would require the ability to protect 
quantum information against not only noise but also the inevitable operational (i.e., gate) 
errors that accompany its processing. It was initially supposed that it would be impossible 
to protect quantum information not only because of the scale of computation but because 
of reasons intrinsic to quantum information. Fortunately, such skepticism was laid to rest 
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when Peter Shor [142] and Andrew Steane [144, 145] independently proposed schemes to 
protect quantum information from noise and operational errors. Gottesman [61] and in- 
dependently Calderbank et al, [35] proposed methods to construct quantum codes from 
classical codes. Commonly referred to as "stabilizer codes", these codes are the most stud- 
ied class of quantum codes. Their work was followed with a substantial body of results 
related to quantum error correction. More importantly, it was shown that if the overall 
error rate was lower than a "threshold", it was possible to perform an arbitrarily long quan- 
tum computation with any desired accuracy with only a polylogarithmic overhead in time 
and space [1]. 

With these fundamental results in place, the focus of quantum coding theory shifted 
to the design of good codes, systematic methods for construction, efficient decoding algo- 
rithms, passive error correction schemes, optimizing codes for realistic noise processes and 
the like. These questions are in some sense interrelated. This dissertation seeks to address 
these questions^ in varying degree as will be elaborated below. It explores various models 
and methods of quantum error correction. Broadly, its contribution to the theory of quan- 
tum error correction is threefold. Firstly, it extends the framework of nonbinary stabilizer 
codes. It clarifies the connections of stabilizer codes to classical codes over quadratic ex- 
tension fields, provides many new constructions of quantum codes, and develops further the 
theory of optimal quantum codes and punctured quantum codes. Secondly, it contributes 
to the theory of operator quantum error correcting codes (also called as subsystem codes). 
These codes are expected to have efficient error recovery schemes compared to stabilizer 
codes. This dissertation develops a framework for study and analysis of subsystem codes 
using character theoretic methods. The framework has made it possible to study subsystem 
codes by translating them into classical codes. Thirdly, it seeks to exploit the knowledge 

^In this dissertation we do not focus so much on fault tolerance. 
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of noise to design efficient quantum codes and considers more realistic channels than the 
commonly studied depolarizing channel. In addition to providing many explicit construc- 
tions for quantum codes, it seeks to integrate developments such as low density parity check 
(LDPC) codes into quantum coding theory. 

C. Outline and Contribution 

This dissertation is structured as follows. In Chapter III, we consider the theory of nonbi- 
nary stabilizer codes initiated by Rains [126] and Ashikhmin and Knill [11]. This work was 
motivated in part by the comparatively little attention that codes over nonbinary alphabet 
had received. Currently it appears that binary quantum systems are comparatively easier to 
control and implement than multi-level quantum systems. However, the growing interest 
in nonbinary implementations suggests that nonbinary codes deserve a closer study, espe- 
cially as quantum technologies mature. Further, many of the quantum mechanical systems 
naturally allow for a multi-dimensional representation of quantum information. Instead of 
simply ignoring them as is often the case, it might be to our benefit to exploit these addi- 
tional degrees of freedom. It could for instance lead to implementation of quantum proces- 
sors with fewer systems. In fact, there are proposals to exploit these additional modes not 
only to implement nonbinary quantum systems [30] but also use them to simplify binary 
implementations [51, 130]. It stands to reason that we need a systematic theory to design 
good codes for nonbinary implementations. This chapter concerns itself with generalizing 
many of the ideas of stabilizer codes to the nonbinary setting. The nonbinary generaliza- 
tion turns out to be a nontrivial task and in fact there still remain many open questions with 
respect to nonbinary quantum codes. We derive a number of important results with regard 
to structure and constructions of nonbinary stabilizer codes. 

Armed with the framework of nonbinary stabilizer codes developed in Chapter IE, we 
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then turn to a more constructive task of designing good quantum codes in Chapter IV. As 
in the classical case, quite often, imposing the constraint of linearity on the code structure 
substantially simplifies our task. We have more control over the parameters of the codes 
we design and more importantly, imposing the linearity constraint simplifies the encoding 
and decoding complexity. Therefore, we focus on the construction of some linear quantum 
codes bringing into bearing the machinery of the previous chapter. As in the case of clas- 
sical codes, optimal codes generate a lot of interest not only because of their optimality, 
but because, not infrequently, they possess additional combinatorial structure that leads to 
interesting mathematical problems. We also study the quantum MDS codes in this chapter, 
establishing some structural results related to them. 

While error correcting codes address the problem of protecting quantum information, 
there are still certain hurdles to be crossed if we are to build a quantum computer. Unlike 
classical case where we can, with good reason, assume that the encoding and decoding 
operations are noiseless or at least that they are not as noisy as the channel, quantum infor- 
mation processing does not allow us to do so. The process of encoding and decoding can 
be as noisy as the channel itself. Codes then have to designed to allow for fault tolerant 
computation not merely communication or storage. The theory of fault tolerant quantum 
computation was developed to address this challenge. In keeping with this goal of fault 
tolerant quantum computation some researchers have been investigating passive forms of 
quantum error correction, where information was encoded into subsystems that were im- 
mune to noise. Kribs et ah, [99, 100] proposed a generalized framework for understanding 
both active and passive forms of quantum error correction. Such codes are called operator 
quantum error correcting codes or subsystem codes because in this model information is 
protected by encoding into subsystems as against the subspaces. Informally, this amounts to 
encoding each logical state into an equivalence class rather a unique state in the codespace. 
The equivalence class is actually a subspace and any state in the subspace is a representa- 
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tive of the logical state. This is accomplished through the use of additional qubits called 
gauge qubits. This method also generalizes the class of stabilizer codes studied in the 
Chapters III, IV. In view of its relevance to fault tolerant quantum computing we devote 
Chapter V to the study of operator quantum error correcting codes. Using character the- 
oretic methods we establish a connection with classical codes that enables us to construct 
these codes systematically. In particular, we relax the constraint of self-orthogonality on 
the classical codes used to construct stabilizer codes. 

In Chapter VI we extend the theory of operator quantum error correcting codes. The 
results are of interest in that they provide insight into the structure of subsystem codes. 
Additionally, they enable us to compare the gains that subsystem codes provide over sta- 
bilizer codes. An important question that had been raised when the subsystem codes were 
first discovered was the possibility of improving upon optimal stabilizer codes in the sense 
of requiring fewer syndrome measurements than them. We demonstrate in this particular 
sense the subsystem codes, at least the linear ones, cannot outperform the MDS stabilizer 
codes. 

The presence of gauge qubits in subsystem codes not only simplifies error correction 
procedures, but it can potentially simplify the encoding process. Usually, the complexity 
of encoding is not as large as the complexity of decoding and is often neglected. But in the 
context of fault tolerant quantum computing, it is useful to have simpler encoding schemes. 
Previous work on subsystem codes contained claims that the encoding could also benefit 
due to subsystem coding but the exact circuits and the trade offs involved in achieving these 
gains were either absent or not rigorously justified. In Chapter VII we show how subsystem 
codes can be encoded, and how to exploit the presence of the gauge qubits to simplify the 
encoding process. We contend these simplifications in the encoding circuitry should also 
lead to additional benefits for fault tolerant quantum computation. 

Much of quantum coding theory followed the same path as the classical coding theory 
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did historically. That is it took on an algebraic outlook with great emphasis on the distance 
of the code. But modem coding theory has gradually moved away from such a one dimen- 
sional characterization of code performance. In the modem picture instead of requiring 
that all errors up to a certain weight be correctable it has shifted the focus to achieving 
the capacity of the channel while keeping the complexity of encoding and decoding low. 
But these insights have not yet been fully absorbed by quantum coding theory. The reason 
is not that it has not been attempted. Starting with the works of Postol [119], MacKay 
et al., [105], Camara et al., [37] and more recently Poulin and Chung [122], there have 
been attempts to incorporate these modem developments into quantum coding theory. The 
difficulty is addressing the conflicting requirements that are posed on the classical codes 
from which the quantum codes are constmcted. The additional constraints usually imply 
that these are bad codes classically and unlikely to lead to good quantum codes. In Chap- 
ter Vin, we contribute to the ongoing discussion on quantum LDPC codes by providing 
new constmctions of algebraic quantum LDPC codes. 

In Chapter VIII we also study a problem that has generated a lot of interest lately viz. 
the use of realistic noise models in quantum error correction. Much of earlier work often 
assumed that the channels are depolarizing channels. The depolarizing channel while being 
particularly simple is not necessarily the most accurate noise model which reflects many 
of the current quantum technologies. In Chapter Vni we study the design of codes that are 
in some measure optimized to channels that are asymmetric. For these channels we also 
address the problem mentioned earlier, how to incorporate the modern developments such 
as LDPC codes effectively. We study the theory of codes for asymmetric quantum channels 
and also provide systematic constmctions of classes of quantum codes for them. While it 
remains to be seen if these codes are suitable for quantum computation, they seem most 
suited for quantum memories. 

In Chapter IX we slightly change tracks to illustrate how the study of quantum codes 
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can shed light on classical codes. In this chapter we show how studies in quantum codes 
led to us to gain additional insight into the properties of BCH codes. Despite the fact these 
codes have been known for more than forty years now, there remain open problems with 
regard to their properties. We make some contribution to our understanding of these codes 
in the context of quantum error correction. We characterize the dimension and duals of 
narrow-sense BCH codes giving simple closed form expressions for their dimensions and 
simple criteria to identify dual containing BCH codes. 

The material in Chapters HI and IV is due to a joint work [83] with Andreas Klap- 
penecker, Avanti Ketkar, and Santosh Kumar. Part of this material has appeared earlier in 
the theses of Avanti Ketkar and Santosh Kumar. Chapters V, VI and VII are in collabo- 
ration with Andreas Klappenecker and are based on [90,91] and [135]. The material in 
Chapter VIII is the outcome of a joint work [136] with Martin Rotteler and Andreas Klap- 
penecker and was partly performed while at NEC Laboratories America, Inc. The results 
in Chapter IX are due to a joint work with Andreas Klappenecker and Salah Aly [8]. 

To keep the dissertation of a manageable and readable size, I have not included my 
investigations of algebraic geometric quantum codes (in collaboration with Andreas Klap- 
penecker) [133, 134], quantum convolutional codes [3, 9] (together with Andreas Klap- 
penecker, Salah Aly, Martin Rotteler and Markus Grassl), degenerate quantum codes [5], 
group algebra duadic codes [7], some additional results on subsystem codes from [6] which 
were due to joint work with Andreas Klappenecker and Salah Aly. 
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CHAPTER II 
BACKGROUND 

To make the dissertation self-contained and also to provide the context for the research per- 
formed, this section provides a brief review of ideas relevant to quantum error correction. 
Because the breadth of the contents precludes any possibility of covering it completely in a 
short space, we recommend the lecture notes by Preskill [123] and the textbook by Nielsen 
and Chuang [114] for an accessible introduction to quantum computation. Those familiar 
with quantum computing can skip this chapter and proceed directly to topics of interest. 
While there is a logical progression of ideas, effort has been made so that the chapters can 
be read independently to some extent. 

A. Quantum Computation 

1. Qubits 

Just as bits are abstractions of classical two level systems, qubits are an abstraction of 
two level quantum systems. We denote the basis states in the so-called Dirac notation 
where |0) (ket zero) and |1) (ket one), are simply column vectors [J] and [?] respectively. 
This notation also serves to distinguish them from the classical states. The first essential 
difference with respect to bits is that the qubits can be in superposition of the basis states 
i.e., they can be in any linear combination of the basis states subject to a normalization 
constraint. For instance, consider a single qubit. This qubit can be in the state 

a |0) , where a, 6 e C and \af + \bf = 1. 

So the state space of a qubit is C^. 

While the qubit can be put in any superposition of the basis states, the observed state 
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of the qubit is restricted to be either one of the states. We cannot observe the superposition 
itself. Any observation of the qubit "collapses" the state of the qubit to either |0) or |1) 
with probability |ap and |6p respectively. This underscores the second difference between 
bits and qubits. Observation of qubits can change their state in general. 

If we have n qubits, then the state space is actually a tensor product of the individual 
state spaces. We refer to the state space of the system as the Hilbert space and denote it 
by n. We have = ® ® • • • ® with dimTY = 2". An orthonormal basis for 
a, is given by ® \x2) ® ■ ■ ■ ® The basis states are also sometimes denoted as 
\x1X2 . . . Xn) or \xi,X2, . . . , Xn), whcre the Xi take the values zero or one. We can also 
label the basis elements by x e F2 . Then a general state is given by 

1^) = X^a^k); X^laxT^l- (2.1) 

The state of the system is a unit vector of length one in Ti,. The probability of observing 
the system in state \x) is given by la^jp. The normalization constraint is due to the fact 
on measurement some state will be observed. To describe a general state then, we require 
2" — 1 complex numbers. This is in contrast to the classical case where the state space is 
only n dimensional. As an example, a two qubit system can be put in the state 

ao|00)+ai|01) + a2|10) + a3|ll), 

where |aoP + |aip+ |a2p + jaap = 1. The basis state |00) is actually |0) ® |0) = [^] [ J]. 
Other basis states are given similarly. 

Often we will need to observe only a part of the system. This is a little more involved. 
Assume that we have a system of m + n qubits and we want to observe m qubits. An 
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arbitrary state of the system is of the form 

Let us assume that we want to observe the qubits whose states correspond to \x). Then the 
probability of observing these qubits in state \x) is given by 



Assuming that we observed \x), the state of the system after observation is given by 

Observing quantum systems can be described using the more powerful measurement for- 
malism, see for instance [114]. 

An important consequence of the fact that the qubits can be in superposition is a phe- 
nomenon known as entanglement. Consider the following state. We ignore the normaliza- 
tion factors for convenience. 

|V^) = |01) + |11). 
We could also write this state as the product state i.e., 

|^) = |0)®(|0) + |1)). 

When the states of the qubits can be written as product states then we can observe each of 
the product states without disturbing the rest of the system. However there are states such 
as the following which cannot be written as the product of individual qubit states. 

|V') = |oo) + |ii) = |oi) + |io). 

Such states are said to be entangled and this phenomenon is called entanglement. When 
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qubits are entangled it is not possible to observe the state of one of the entangled qubits 
without disturbing the rest of the system. One could view the speedup provided by quantum 
computers as being due to entanglement. 

We associate to every state inHa row vector denoted as which is simply the 
adjoint of the column vector corresponding to jz/'). Two vectors jV') and \(p) are said to be 
orthogonal if their scalar product denoted as {cp \ i/j) = 0. This is also called the inner 
product of two vectors. 

2. Quantum Gates 

Just as classical data is manipulated using gates, qubits are also manipulated using quantum 
gates. Since the quantum states are unit vectors in C^", we could view the application of 
gates on the qubits as matrices on C^" . The postulates of quantum mechanics require the 
matrices to be unitary, i.e., they must satisfy U"^ — W, where W is the adjoint of the 
matrix. We denote the action of a gate U on a state |^) as U 1^/^). We denote the inner 
product of [/ IV') and as U {i/j) . Some important operations on a single qubit are the 
following. 





1 




-i 




1 


X = 


1 


; Y = 


i 


; z = 


-1 



These operators are also called Pauli errors. We will denote the group generated by the 
Pauli errors by V. Often Y is redefined without the i for convenience in analysis. When 
we consider n qubits we define the Pauli group of matrices on them as 

= {fci (g) 62 ® • • • (8) e„ I e c e Z4}, where Z4 = {0, 1, 2, 3}. (2.4) 

In a subsequent chapter we will generalize the notion of Pauli group and use it to define 
error operators and construct codes over prime power alphabet. 
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Other important single qubit gates are the Hadamard gate, H, the phase gate P and 
the 7r/8 gate (or T gate) which are defined as 



(2.5) 



Perhaps the most important two qubit gate is the CNOT (controUed-NOT) gate. The action 
of the CNOT gate on the basis states is as follows. 





1 1 




1 




1 


H = 


1 -1 


; 


i 


; T = 


e^'^/^ 



\x) 

\y) 



X) 

x®y) 



The top qubit is called the control qubit and the bottom qubit is called the target qubit. A 
CNOT gate with control qubit i and target qubit j is denoted as CNOT*'^ and acts as follows 
on these two qubits: 
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(2.6) 



The CNOT gate along with H, P and T gates forms a set of universal gates for quantum 
computation. Any arbitrary quantum gate can be realized efficiently using these set of gates 
to arbitrary accuracy by the Solovay-Kitaev theorem. A graphic representation of the gates 
mentioned so far is given below: 
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An important point about the quantum gates is that they act linearly. Let us illustrate. The 
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X gate acts as follows: 

X|0) ^ |1) andX|l) ^ |0), 

so when it acts on an arbirary state such as a |0) + 6 |1) we get a |1) + 6 |0). Later in 
Chapter Vll we will have occasion to give encoding and decoding circuits for subsystem 
codes. These ideas will be needed then. 

3. Density Operators 

The state of qubits can be viewed not only as a unit vector in the Hilbert space but also 
as operators on Ti,. This approach makes it easy to analyze and study quantum channels. 

Given two vectors 1^) and \(b) we can define what is known as the outer product of 1^) and 







We call 



10) as 10) For instance if = |0) and |0) = |1). Then |1) (0| = 

1 

the outer product obtained from |^) with itself i.e., p — |V') {ip \ as the density matrix or the 
density operator. The density matrix is positive definite, i.e., {ip \ p\ip) > 0, and Tr(p) = 1 
where Tr is the sum of the diagonal entries. Since the density operators are matrices of size 
2" X 2", we can also view the states as being operators on the system Hilbert space. A view 
which will be useful when defining quantum channels. More generally if a system can be 
found in one of the states with probability Pi, the density operator associated to this 
system is given by 

i 

A state is pure if Tr(p^) = 1 and mixed otherwise. The density operator approach will 
be helpful in understanding the motivation behind operator quantum error correction in 
Chapter V and also in Chapter VIU, where we design codes optimized for a given channel. 
When a gate U is applied to a state with density matrix p, it transforms as U pU^. 
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4. Quantum Noise 

Noise on qubits is very different from the noise that we deal with bits. The noise can be 
thought to be arising out of the fact that the information bearing system cannot be com- 
pletely isolated from the environment and its interaction with the environment causes its 
state to change. Sometimes this phenomenon is also called decoherence. 

Since the state of a single qubit is given a |0) + 6 |1), where a, 6 are complex numbers, 
one can expect that errors on quantum information form a continuum unlike the classical 
bits where there exist only bit flip errors. In fact, we can view noise on a qubit as a 2 x 2 
complex matrix and more generally, noise on n qubits is a 2" x 2" complex matrix; for this 
reason we often refer to errors as error operators. 

While we have to protect quantum information from an infinitude of errors, in view 
of linearity of quantum mechanics, it suffices to correct for only a basis of errors. The 
importance of the Pauli errors also stems from the fact that they form a basis for the error 
operators. Of course, we cannot protect against all errors. We usually make the assumption 
that noise on each qubit is independent. Under this assumption we can decompose an error 
on the system into a tensor product of n single qubit errors. 

Errors on the quantum states can also arise due to the finite precision with which the 
quantum gates are implemented. Fortunately, the same mechanisms that are used to correct 
decoherence can also be used to correct for these type of errors [140, 142]. 

5. Quantum Channels 

A quantum channel is a linear map on the density operators (on C^'") to the set of density 
operators (on C^"); we usually assume that the input and output Hilbert spaces are same 
i.e., m — n. Sometimes quantum channels are also called "superoperators" to indicate that 
they act on (density) operators. In this dissertation we will confine ourselves to maps which 



16 



are completely positive and trace preserving (CPTP) maps. A CPTP map £ is usually given 
in terms of its Kraus decomposition. 

£{p) = J2 EiP^l where ^l^i = ^- (2.7) 

i i 

The quantum channel view is very convenient to understand errors. For instance if we 
assume that the bit flip errors occur with a probability p and the rest of the time there are 
no errors. We can represent this as the following channel. 

£{p) = {l-p)p + pXpX. (2.8) 

The Kraus operators are easily identified as ^/l — pi and ^ypX. The channel often studied 
in the context of quantum codes is the depolarizing channel and it parallels the classical 
4-ary symmetric channel. This channel acts as 

£{p) = {l-3p)p + pXpX +pYpY +pZpZ. (2.9) 

In this channel, each of the Pauli errors X, F or Z act with a probability p and with a 
probability of 1 — 3p, the state is preserved. The Kraus operators are simply given by 

^/l - 3pl, v^X, y^Y and ^/pZ. 

B. Quantum Error Correction 

In this section we briefly review the elements of quantum error correction. The reader is 
also recommended to [35,61,95] for more details. Additionally, there are many expositions 
to the ideas of quantum error correction, see [13, 55, 82, 96, 108]. Here we summarize the 
main features. We will restrict our attention to additive quantum codes. 

A binary quantum code is a linear subspace of the system Hilbert space i.e., C^". The 
subspace structure arises due to the fact that we can have superpositions of the encoded 
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states. For instance, let us assume that the logical states are the following: 

|0> = |000); |T> = |111). (2.10) 

Since we are allowed to have linear combinations of states, this implies that a \ 000) +6 1 1 11) 
is also a valid state and belongs to the code. The subspace structure of the quantum code 
can be seen to emerge naturally. The typical questions that we have to address when dealing 
with error correcting codes classical or otherwise are: 

• Construction 

• Encoding 

• Error correction 

• Performance 

In the case quantum codes, there is yet another component that plays a much more im- 
portant role than in case of classical codes. The codes should be suitable for fault tolerant 
computation i.e., we should be able to perform logical operations on the encoded data with- 
out having to decode them. The encoded operations must also ensure that the errors must 
not propagate catastrophically beyond the error correcting capability of the code. In this 
thesis we will not get into the issues of fault tolerance. We shall address the problem of 
construction and performance in more detail in the later chapters of this dissertation. Let 
us look at the other two aspects. 

Since quantum codes are subspaces in C^", constructing quantum codes can be viewed 
as packing of subspaces in H. In fact, the original approaches to quantum error correction 
were along this route. This geometric picture while intuitive is not very convenient; for- 
tunately, we can translate the problem of construction into one with a lot more algebraic 
flavor and more importantly, into a much more familiar language involving construction of 



18 



classical codes. We will have much more to say on this topic of how to link the classical 
codes and the subspaces in H later in Chapters III and V. 

Assume for now that we have some means to choose a subspace to be our quantum 
code, Q. Then, from linear algebra we know that we can project onto a subspace by means 
of a projector. A projector P satisfies P"^ = P. A projector for Q can be easily constructed 
by choosing an orthonormal basis of the subspace Q, say {\ai) , . . . , lax)}, and forming 
the following matrix 

K 

= 1"'^ ^"^1 ■ 

1=1 

The dimension of the subspace is related to P as dim Q — Tr(P). The subspace induces a 
decomposition of the Hilbert space into orthogonal subspaces. Encoding amounts to real- 
izing P, though there are important subtleties to be addressed, (such as the nonunitariness 
of P). For instance, the encoding in equation (2.10) can be easily accomplished using the 
following circuit. 
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> a|000) + 6|lll) 



We shall study encoding circuits in more detail in Chapter Vll when we discuss encoding 
of subsystem codes. 

When it comes to quantum error correction, there are a few points worth highlight- 
ing. Error correction or error recovery implies that we correct the errors on the encoded 
information without finding out what was the original information stored. By decoding we 
mean the process of extracting the information from the encoded qubits. It presumes that 
error correction has already been performed. Classically, we do not have to make such 
fine distinction between error correction and decoding because once error correction is per- 
formed it is not difficult to obtain the information that was encoded without affecting the 
encoded state. In the quantum setting decoding amounts to destroying the encoded state. 
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In the context of fault tolerant quantum computation we would not like to decode until the 
end of the computation as it would remove the protection afforded by the code. Unless 
explicitly mentioned our focus will be on error recovery or correction. We will assume that 
the decoding of the encoded information is performed at the end of the computation. In 
this dissertation we will be concerned with error correction unless specified otherwise. 

Let us look at the error correction process in a little more detail. Assume that we use 
the encoding given in equation (2. 10). Suppose that there is a bit flip error on the first qubit, 
also called an X error. Then we have 



Bit flip 



a|000) + 6|lll) a|100) + 6|011) 



We cannot take a majority voting to figure out the error as in the classical case because if 
we observed the state we would collapse the state to either |100) or |011). Although we 
maybe able to find that there was an error on the first qubit, we have also damaged the state. 
Thus error correction process is a little more complicated in the quantum case. We must not 
perform a full measurement of the system. We solve this problem by partial measurements 
and the use of additional qubits called ancilla. Let us illustrate this for our running example. 
We can compute the parity of the first two qubits and the second two qubits as follows. 



Encoding Noise 



|0), 
|0)l 



J 



Syndrome Measurement Correction 

I 



io); 

|0)1 



^ — ^ 



e — e 



L 

















_l 



n 



20 



The state of the qubits changes as follows as we move across the circuit: 

a |0) + 6 |1) |00) |00) {a |000) + 6 |111)) |00) ""A' {a |100) + b |011)) |00) 

(a |100) |1) + 6 |011) |0)) |0) (a |100) \l)+b |011) |1)) |0) 

= (a|100) +6|011)) |1) |0) 

It will be seen that the first ancilla qubit becomes entangled with the encoded state briefly 
and then becomes unentangled. At this point we can make a measurement of the ancilla 
without disturbing the rest of the encoded state. The double lines indicate classical bits. 
We can then perform a correction operation based on the measurement of ancilla qubits. 
The value measured is usually called the syndrome. 

The important thing to notice is that if we have an error then the codespace is taken to 
an orthogonal subspace of C^", in the example considered it is the space spanned by 1 100) 
and |011). On the other hand consider an error that flips all the qubits. This error takes 
1 000) to I 111) and vice versa. Its action on Q is to merely permute the basis vectors. Since 
it takes valid codevectors to valid codevectors, it cannot be detected. Finally, let us consider 
an error which has no classical analogue. If we had a Z error on the first two qubits, then 
it would take |000) to |000) and | 111) to | 111). So a nontrivial error can act trivially on the 
codespace. We consider such errors to be harmless. This gives us a general principle for an 
error to be detectable. We shall make use of this lemma later, especially in Chapters III, V. 

Lemma II.l ( [95]). Given a quantum code Q, with projector P, and \a) and \P) two 
orthogonal vectors in Q. An error E is detectable if and only if {a\ E \ f3) — Xe (q;| E \(3), 
where Xe depends only on E. Alternatively, an error is detectable if and only if PEP — 
XeP. 

Given a set of errors {-Ei, E2, ■ ■ ■ , Ei} that are detectable by Q, their linear span is also 
detectable by Q. The subspace Q induces a decomposition of C^". Detectable errors take 
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the subspace one of the orthogonal subspaces, while undetectable errors take Q to itself. 

C. Classical Coding Theory 

In this section we discuss some of the relevant aspects of classical codes setting the stage 
for our work on quantum error correction. In view of vastness of the subject, the reader 
is recommended standard textbooks in the field such as [76, 104, 107] for a comprehensive 
treatment of the field. 

Let ¥q denote a finite field with q elements; we have q — for some prime p. If 
X — (xi, . . . , Xn) e F^, then we denote the Hamming weight of x as 

wt(x) = |{x,^0}|, (2.11) 

i.e., it is the number of nonzero coordinates of x. We say that a subset C C is an 
additive code if for any x, y in C, x + y is also in C. Additive codes play an important 
role in quantum error correction. If in addition to being additive, C also satisfies ac e C 
for any a e ¥q and c E C, then C is said to be an F^-linear code. Such codes often have 
simpler encoding and decoding schemes while being tractable in terms of construction and 
analysis. The minimum distance of a set C C F^ is defined as 

wt(C) = min{wt(x - y)}. (2.12) 

x,yeC 

The (minimum) distance of a code is indicative of the error correcting capabilities of the 
code. If C is an additive code, its distance is given by 

wt(C) = min wt(c). (2.13) 

A classical (n, K, d)q code C C F^ is subset of F" of size \C\ — K and distance 
d = wt(C). If \C\ = q^, then we denote it by [n, k, d]q. If C is also Fg-linear code, then 
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C is a A; -dimensional subspace of . Linear codes are often described by giving a basis of 
codewords in the form a matrix, often called as the generator matrix. For example, consider 
the [7, 4, 3)2 Hamming code with the generator matrix 
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It consists of all the linear combinations of the rows of G. When the generator matrix is in 

the form [I\P] we say that it is in the standard form. We define the Euclidean inner product 
between two codewords x, y e as 

n 

x-y = xiyi H h XnVn = XI ^^y^- ^^-^^^ 

i=l 

The Euclidean inner product enables us to define a dual code. It is defined as 

C^^jxeF^ |a;-c = OforallceC}. (2.15) 

This is also called as the Euclidean dual of C. The dual code is itself a linear code with its 
own generator matrix H. A generator matrix of C"*- is also called a parity check matrix for 
C. For the example just considered, a parity check matrix is given by 
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When the generator matrix for C is given in the standard form [/fc |-P], a parity check matrix 
is easily obtained as [—P^\In-k]- One important relation between the generator matrix and 
the parity check matrix is that GH* — 0. When a code C C C-*-, we say that C is a self- 
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orthogonal code. If C — C , then we say it is a self-dual code. In the context of quantum 
error correcting codes, dual codes and self-orthogonal codes play a much more significant 
role than in the classical case. Additionally, we encounter far more general notions of inner 
products. 
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CHAPTER m 

THEORY OF NONBINARY STABILIZER CODES* 
As mentioned earlier, quantum codes were developed to make fault-tolerant quantum com- 
putation possible. The most widely studied class of quantum error-correcting codes are 
binary stabilizer codes, see [14, 15, 26, 34, 36, 41^4, 49, 56, 60, 61, 63, 64, 66, 68, 69,72, 84, 
85, 87, 108, 127, 142, 144-147, 151, 154] and, in particular, the seminal works [35,59]. An 
appealing aspect of binary stabilizer codes is that there exist links to classical coding theory 
that facilitate the construction of good codes. More recently, some results were generalized 
to the case of nonbinary stabilizer codes [1, 10, 1 1, 28, 39,40, 53, 54, 62, 7 1, 73, 86, 102, 109, 
126, 132, 137, 138], but the theory is not nearly as complete as in the binary case. 

One would naturally ask why study nonbinary codes? There are at least three reasons 
for our interest in nonbinary codes. The first reason is the generalization is a nontrivial 
mathematical problem that is of interest in itself. Results which are considerably easy 
to prove in the binary case turn out be much more formidable requiring the use of ele- 
gant mathematical techniques to solve the problems. The second reason is a practical one 
and motivated by the behavior of classical codes. Many good classical codes like Reed- 
Solomon codes are nonbinary codes. Algebraic geometric codes that were the first shown 
to beat the Gilbert- Varshamov bound were once again nonbinary codes. Even in the case 
LDPC codes it has been shown that increasing the alphabet size improves the performance 
albeit at the expense of complexity. As we shall see the close connections between the clas- 
sical and quantum codes tempt the conclusion that perhaps one would expect to find good 
classes of quantum codes over a larger alphabet. Thirdly, quite often many implementations 

*(c)2006 IEEE. Reprinted in part, with permission, from A. Ketkar, A. Klappenecker, 
S. Kumar and P. K. Sarvepalli, "Nonbinary stabilizer codes over finite fields". IEEE Trans. 
Inform. Theory, vol. 52, no. 11, pp. 4892-4914, 2006. 
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naturally allow for a multilevel quantum system. These extra modes are usually ignored; 
but lately they have received interest, see [23, 30,46, 65, 1 13] and references therein. Addi- 
tionally, as shown in [130], if properly exploited, this can lead to efficient implementation 
of gates. All these reasons motivate our investigations of nonbinary quantum codes. 

This chapter has two primary goals. On one hand we provide a review of the theory 
of stabilizer codes and on the other we also extend and generalize many of the results. 
This chapter is structured as follows. We recall the basic principles of nonbinary stabilizer 
codes over finite fields in Section A. In Section B, we introduce a Galois theory for quan- 
tum error-correcting codes. The original theory developed by Evariste Galois relates field 
extensions to groups. Oystein Ore derived a significantly more general theory for pairs of 
lattices [116]. We use this framework and set up a Galois correspondence between quan- 
tum error-correcting codes and groups. This theory shows how some properties of general 
quantum codes, such as bounds on the minimum distance, can be deduced from results 
about stabilizer codes. 

In Section C, we recall that stabilizer codes over a finite field correspond to additive 
codes over ¥q that are self-orthogonal with respect to a trace-symplectic form [11]. We 
also establish the correspondence to additive codes over F^2 that are self -orthogonal with 
respect to a trace- alternating form; remarkably, this basic construction had been missing in 
the literature, in spite of the fact that it is a generalization of the famous F4 -codes [35]. 

The Mac Williams relations for weight enumerators of stabilizer codes are particularly 
easy to prove, as we show in Section D. We then derive upper and lower bounds on the min- 
imum distance of the best possible stabilizer codes in Section E. Section F details methods 
to construct new methods to construct quantum codes from existing quantum codes. Unlike 
classical codes, puncturing quantum codes is a relatively complex task. So we include a 
generalization of the puncturing theory introduced by Rains to additive codes that are not 
necessarily pure. In a later chapter we show how to apply it. 
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Apart from the basics of quantum computing, we recommend [35] and [61] for back- 
ground on binary stabilizer codes, in addition to books on classical coding theory, such 
as [76, 104, 107]. The general theory of quantum codes is discussed in [95], and we assume 
that the reader is familiar with the notion of a detectable error, as introduced there. 

Notations. We assume throughout this chapter that Fg denotes a finite field of char- 
acteristic p; in particular, q always denotes a power of a prime p. The trace function from 
¥qm to Fg is defined as trgm/q(x) = Y^^Zo ^^'"j we may omit the subscripts if F^ is the 
prime field. If G is a group, then we denote by Z{G) the center of C If 5" C G, then we 
denote by Cg{S) the centralizer of S in G. We write H < G to express the fact that H isa 
subgroup of G. The trace Tr(M) of a square matrix M is the sum of the diagonal elements 
of M. 

A. Stabilizer Codes 

Let be a g-dimensional complex vector space representing the states of a quantum me- 
chanical system. We denote by \x) the vectors of a distinguished orthonormal basis of C^, 
where the labels x range over the elements of a finite field ¥q with q elements. A quantum 
error-correcting code Q is a X-dimensional subspace of C*" = • • • C^. 

We need to select an appropriate error model so that we can measure the performance 
of a code. We simplify matters by choosing a basis En of the vector space of complex 
X matrices to represent a discrete set of errors. A stabilizer code is defined as the 
joint eigenspace of a subset of £n, so the error operators play a crucial role. 
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1. Error Bases 

Let a and h be elements of the finite field Fg. We define the unitary operators X{a) and 
Z{h) on C« by 

X{a) \x) = \x + a), Z{b) \x) = u''^'''^^ \x) , 

where tr denotes the trace operation from the extension field Fg to the prime field Fp, and 
uj = exp(27ri/p) is a primitive pth root of unity. 

We form the set £ — {X{a)Z{b) \ a,b e F^} of error operators. The set E has some 
interesting properties, namely (a) it contains the identity matrix, (b) the product of two 
matrices in £^ is a scalar multiple of another element in £, and (c) the trace Tr{A^B) = 
for distinct elements A,Bof£. A finite set of unitary matrices that satisfy the properties 
(a), (b), and (c) is called a nice error basis, see [93]. 

The set £ of error operators forms a basis of the set of complex q x q matrices due to 
property (c). We include a proof that £ is a nice error basis, because parts of our argument 
will be of independent interest in the subsequent sections. 

Lemma III.l. The set 8 — {X{a)Z{h) | a, 6 e F^} is a nice error basis on C^. 

Proof. The matrix X(0)Z(0) is the identity matrix, so property (a) holds. We also have 
ijj^^'^^°')X{a)Z{h) — Z{h)X{a), which implies that the product of two error operators is 
given by 

X{a)Z{h) X{a')Z{h') = u'^^^^'^Xia + a')Z{h + h'). (3.1) 

This is a scalar multiple of an operator in £, hence property (b) holds. 

Suppose that the error operators are of the form A — X{a)Z{h) and B — X{a)Z{b') 
for some a, 6, b' e F^. Then 

Tr{A^B) = Tr{Z{b' - 6)) = J] ^i<ib'-b)x)_ 

xeVq 
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The map x i— > u;^^^^^''^")^^ is an additive character of F^. The sum of all character values is 
unless the character is trivial; thus, Tt{A^B) = when b' ^ b. 

On the other hand, if ^4 = X{a)Z{b) and B — X{a')Z{b') are two error operators 
satisfying a ^ a', then the diagonal elements of the matrix A^B — Z{—b)X{a' — a)Z{b') 
are 0, which implies Tr{A^B) = 0. Thus, whenever A and B are distinct element of £, 
then Tr(^t5) = 0, which proves (c). □ 

Example III.2. We give an explicit construction of a nice error basis with q = 4 levels. 
The finite field F4 consists of the elements F4 = {0, 1, a, a}. We denote the four standard 
basis vectors of the complex vector space by |0) , |1) , |q;) , and \ol). Let I2 denote the 
2x2 identity matrix, = ( ? )' = ( -1 )• TTien 

X(0)= 12 12, X(l) = I2 (7^, 

X{a) = a^®l2, =(Ta; (g) (To;, 

Z(0)=l2®l2, Z{l)=a,®l2, 
Z{a) = (8) (J^, Z{a) = I2 <8) cr^. 

We see that this nice error basis is obtained by tensoring the Pauli basis, a nice error basis 
on <C?. The next lemma shows that this is a general design principle for nice error bases. 

Lemma III.3. If £1 and £2 are nice error bases, then 

£ = {E^®E2\E^e £1, E2 e £2} 

is a nice error basis as well. 

The proof of this observation follows directly from the definitions. 

Let a = (ai, . . . , a„) G F^'. We write X(a) = X{ai) ® ■■■ ® X{an) and Z{a) = 
Z(ai) (g) • • • (8) Z(a„) for the tensor products of n error operators. Our aim is to provide 
an error model that conveniently represents errors acting locally on one quantum system. 
Using the new notations, we can easily formulate this model. 
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Corollary III.4. The set £n — {X(a)Z(b) | a, b e F^} is a nice error basis on the complex 
vector space C*". 

Remark. Several authors have used an error basis that is equivalent to our definition 
of En, see [1 1, 54, 86, 109]. We have defined the operator Z{h) in a slightly different way, 
so that the properties relevant for the design of stabilizer codes become more transparent. 
In particular, we can avoid an intermediate step that requires tensoring p x p-matrices, and 
that allows us to obtain the trace- symplectic form directly, see Lemma III.5. 

2. Stabilizer Codes 

Let Gn denote the group generated by the matrices of the nice error basis En- It follows 
from equation (3.1) that 

= {u'X{3.)Z{h) I a, b e F^, c e F^. (3.2) 

Note that Gn is a finite group of order pg^". We call Gn the error group associated with the 
nice error basis En- 

A stabilizer code Q is a non-zero subspace of C^" that satisfies 

g = Pi e I = (3.3) 

E&S 

for some subgroup S of Gn- In other words, Q is the joint eigenvalue-1 eigenspace of a 
subgroup S of the error group G„. 

Remark. A crucial property of a stabilizer code is that it contains all joint eigenvectors 
of S with eigenvalue 1, as equation (3.3) indicates. If the code is smaller and does not 
exhaust all joint eigenvectors of S with eigenvalue 1, then it is not a stabilizer code for S. 
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3. Minimum Distance 

The error correction and detection capabilities of a quantum error-correcting code Q are 
the most crucial aspects of the code. Recall that a quantum code Q is able to detect an error 
E in the unitary group U{q^) if and only if the condition {ci\E\c2) = \e{ci\c2) holds for 
all ci, C2 e Q, see [95]. 

It turns out that a stabilizer code Q with stabilizer S can detect all errors in Gn that 
are scalar multiples of elements in S or that do not commute with some element of S, see 
Lemma III.l 1. hi particular, an error in G„ that is not detectable has to commute with all 
elements of the stabilizer. Commuting elements in G„ are characterized as follows: 

Lemma III.5. Two elements E — uj'^X{dL)Z{h) and E' — uj'^' X{a!)Z{b') of the error 
group Gn satisfy the relation 

EE' = uj^'^^-^'-^'-^^E'E. 

In particular, the elements E and E' commute if and only if the trace symplectic form 
tr(b • a' — b' • a) vanishes. 

Proof It follows from equation (3.1) that EE' = a;*'"(^-^')X(a + a')^(b + b') and E'E = 
ujHb'-^)X{a. + a.')Z{h + h'). Therefore, multiplying E'E by the scalar a;tr(b a'-b' a) y^^i^^ 
EE', as claimed. □ 

We define the symplectic weight swt of a vector (a|b) in F^" as 

swt((a|b)) = |{A;|(afe,6,)^(0,0)}|. 

The weight w{E) of an element E — a;'^X(a)Z(b) in the error group G„ is defined to 
be the number of nonidentity tensor components, w(_E') = swt((a|b)). In particular, the 
weight of a scalar multiple of the identity matrix is by definition zero. 
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A quantum code Q has minimum distance d if and only if it can detect all errors in 
Gn of weight less than d, but cannot detect some error of weight d. We say that Q is an 
((n, K, d))q code if and only if Q is a i^-dimensional subspace of C^" that has minimum 
distance d. An ((n, q'', d))q code is also called an [[n, k, d]\q code. We remark that some 
authors are more restrictive and use the bracket notation just for stabilizer codes. 

We say that a quantum code Q is pure to t if and only if its stabilizer group S does 
not contain non-scalar matrices of weight less than t. A quantum code is called pure if and 
only if it is pure to its minimum distance. As in [35], we always assume that an [[n, 0, d]]q 
code has to be pure. 

Remarks, (a) If a quantum error-correcting code can detect a set V of errors, then it 
can detect all errors in the linear span of V. (b) A code of minimum distance d can correct 
all errors of weight t — [{d — l)/2j or less. 

B. Galois Connection 

We want to clarify the relation between stabilizer codes and more general quantum codes 
before we proceed further. Let us denote by Q the set of all subspaces of C^". The set Q 
is partially ordered by the inclusion relation. Any two elements of Q have a least upper 
bound and a greatest lower bound with respect to the inclusion relation, namely 

sup{Q,Q'} = Q + Q' and mi{Q,Q'} = Q n Q' . 

Therefore, Q is a complete (order) lattice. An element of this lattice is a quantum error- 
correcting code or is equal to the vector space {0}. 

Let Q denote the lattice of subgroups of the error group G„. We will introduce two 
order-reversing maps between Q and Q that establish a Galois connection. We will see that 
stabilizer codes are distinguished elements of Q that remain the same when mapped to the 
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lattice Q and back. 

Let us define a map Fix from the lattice Q of subgroups to the lattice Q of subspaces 
that associates to a group S its joint eigenspace with eigenvalue 1, 



EeS 

We define for the reverse direction a map Stab from the lattice Q to the lattice Q that 
associates to a quantum code Q its stabilizer group Stab((5), 



We obtain four direct consequences of the definitions (3.4) and (3.5): 
Gl. If Qi C Q2 are subspaces of C«", then Stab(g2) < Stab(gi). 
G2. If Si < S2 are subgroups of G^, then Fix(52) < Fix(5i). 
G3. A subspace Q of satisfies Q C Fix(Stab(Q)). 
G4. A subgroup S of G„ satisfies S < Stab(Fix(5)). 

The first two properties establish that Fix and Stab are order-reversing maps. The exten- 
sion properties G3 and G4 establish that Fix and Stab form a Galois connection, see [29, 
page 56]. The general theory of Galois connections establishes, among other results, that 

Fix{S) = Fix(Stab(Fix(5))) and Stab(g) = Stab(Fix(Stab(g))) holds for all S inQ 
and all Q in Q. 

A subspace Q of the vector space C*" satisfying G3 with equality is called a closed 
subspace, and a subgroup S of the error group G„ satisfying G4 with equality is called 
a closed subgroup. We record the main result of abstract Galois theory in the following 
proposition. 




(3.4) 



Stab(g) ^{E eGn\Ev^v for all veQ}. 



(3.5) 
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Proposition III.6. The closed subspaces of the vector space form a complete sublattice 
Qc of the lattice Q. The closed subgroups of Gnform a complete sublattice Qc of the lattice 
Q that is dual isomorphic to the lattice Qc- 

Proof This result holds for any Galois connection, see Theorem 10 in the book by Birkhoff [29, 



We need to characterize the closed subspaces and subgroups to make this proposition 
useful. We begin with the closed subspaces because this is easier. 

Lemma III.7. A closed subspace is a stabilizer code or is 0-dimensional. 

Proof. By definition, a closed subspace Q satisfies 



Lemma III.8. If Q is a nonzero subspace ofC^", then its stabilizer S — Stab{Q) is an 
abelian group satisfying S fl Z{Gn) — {1}. 

Proof. Suppose that E and E' are non-commuting elements of -S" = Stab((5) . By Lemma in.5, 
we have EE' = u'^E'E for some co'^ ^ 1. A nonzero vector v in Q would have to satisfy 
V — EE'v — uj^E'Ev — uj^v, contradiction. Therefore, 5" is an abelian group. The stabi- 
lizer cannot contain any element u^l, unless k — Q, which proves the second assertion. □ 

Lemma III.9. Suppose that S is the stabilizer of a vector space Q. An orthogonal projector 
onto the joint eigenspace Fix (5*) is given by 



page 56]. 



□ 



g = Fix(Stab(Q)) = Pi {v \ Ev^v}, 



EeStab((3) 



hence is a stabilizer code or {0}. 



□ 
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Proof. A vector v in Fix(5') satisfies Pv — v, hence Fix(5') is contained in the image of P. 
Conversely, note that EP — P holds for all E in S, hence any vector in the image of P is an 
eigenvector with eigenvalue 1 of all error operators E in S. Therefore, Fix(S') = image P. 
The operator P is idempotent, because 



holds. The inverse E^ of E is contained in the group S, hence P^ — P. Therefore, P is an 



Remark. If /S" is a nonabelian subgroup of the group G„, then it necessarily contains 
the center Z{Gn) of G„; it follows that P is equal to the all-zero matrix. Note that the 
image of P has dimension Tr(P) = q'^/\S\. 

Lemma III.IO. A subgroup S of Gn is closed if and only if S is an abelian subgroup that 
satisfies S H Z{Gn) — {1} or if S is equal to Gn. 

Proof. Suppose that 5* is a closed subgroup of G„. The vector space Q = Fix(5') is, by 
definition, either a stabilizer code or a 0-dimensional vector space. We have Stab({0}) = 
Gn- Furthermore, if Q ^ {0}, then Stab((5) = 5" is an abelian group satisfying S n 
Z{Gn) = {!}, by Lemma III.8. 

Conversely, suppose that -S" is an abelian subgroup of G„ such that S trivially intersects 
the center Z{Gn). Let S* = Stab(Fix(5)). We have Fix{S*) = Fix(Stab(Fix(5))) = 
Fix(S'), because this holds for any pair of maps that form a Galois connection. It follows 
from Lemma in.9 that 



Since S < S*, this shows that S — S* — Stab(Fix(5')); hence, 5" is a closed subgroup of 




orthogonal projector onto Fix(5'). 



□ 




G„. We note that Fix(G„) = {0}, so that G^ = Stab(Fix(G„)) is closed. 



□ 
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The stabilizer codes are easier to study than arbitrary quantum codes, as we will see 
in the subsequent sections. If we know the error correction capabilities of stabilizer codes, 
then we sometimes get a lower bound on the minimum distance of an arbitrary code by the 
following simple observation: 

Fact. An arbitrary quantum code Q is contained in the larger stabilizer code given by 
Q* — Fix(Stab((5)). If an error E can be detected by Q*, then it can be detected by Q as 
well. Therefore, if the stabilizer code Q* has minimum distance d, then the quantum code 
Q has at least minimum distance d. 

C. Additive Codes 

The previous section explored the relation between stabilizer codes and other quantum 
codes. We show next how stabilizer codes are related to classical codes (namely, additive 
codes over Fg or Fq2). The classical codes allow us to characterize the errors in Gn that are 
detectable by the stabilizer code. 

In the binary case, the problem of finding stabilizer codes of length n had been trans- 
lated into (a) finding binary classical codes of length 2n that are self-orthogonal with re- 
spect to a symplectic inner product or (b) finding classical codes of length n over F4 that are 
self-orthogonal with respect to a trace-inner product, see [35]. The approach (a) was gener- 
alized to prime alphabets by Rains [126] and to prime-power alphabets by Ashikhmin and 
Knill [11]. We simplify the arguments and include a full proof of this connection. There 
were many attempts to generalize the approach (b) to nonbinary alphabets, but without 
complete success (but see for instance [86, 109, 126] for notable partial solutions). We fill 
this gap and introduce a natural generalization of (b). Furthermore, we discuss simpler 
constructions for linear codes. Before exploring these connections to classical codes, we 
first recall some facts about detectable errors. 
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If 5" is a subgroup of G„, then Cg„ (S) denotes centralizer of S in Gn, 

Cg„{S) ^{E eGn\EF ^ FE for all F e S}, 

and SZ{Gn) denotes the group generated by S and the center We first recall the 

following characterization of detectable errors (see also [1 1]; the interested reader can find 
a more general approach in [88, 92]). 

Lemma III.ll. Suppose that S < Gn is the stabilizer group of a stabilizer code Q of 
dimension dim Q > 1. An error E in Gn is detectable by the quantum code Q if and only 
if either E is an element ofSZ{Gn) or E does not belong to the centralizer Cg^{S). 

Proof. An element E in SZ{Gn) is a scalar multiple of a stabilizer; thus, it acts by multi- 
plication with a scalar on Q. It follows that £^ is a detectable error. 

Suppose now that E is an error in Gn that does not commute with some element F 
of the stabilizer S; it follows that EF — XFE for some complex number A 7^ 1, see 
Lemma HI. 5. All vectors u and v inQ satisfy the condition 

{u\ E \v) = {u\ EF \v) = A {u\ FE \v) = \{u\E \v) ; (3.6) 

hence, {u\E\v) = 0. It follows that the error E is detectable. 

Finally, suppose that E is an element of Ccr^iS) \ SZ{Gn). Seeking a contradiction, 
we assume that E is detectable; this implies that there exists a complex scalar A^ such 
that Ev — Xev for all v in Q. The scalar Ag cannot be zero because E commutes with 
the elements of S, so EP = PEP = XeP and clearly EP 7^ 0. Let S* denote the 
abelian group generated by X^^E and by the elements of S. The joint eigenspace of -S"* 
with eigenvalue 1 has dimension q'^/\S*\ < dimQ = g"/|S'|. This implies that not all 
vectors in Q remain invariant under X'^E, in contradiction to the detectability of E. □ 

Corollary III.12. If a stabilizer code Q has minimum distance d and is pure to t, then all 
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errors E G G„ with 1 < wt(£') < mm{i, d\ satisfy {u\E\v) — Q for all u andv in Q. 

Proof. By assumption, the weight of E is less than the minimum distance, so the error is 
detectable. However, E is not an element of Z{Gn)S, since the code is pure Xot > wt{E). 
Therefore, E does not belong to Cc„{S), and the claim follows from equation (3.6). □ 

1. Codes over Fg 

Lemma III. 1 1 characterizes the error detection capabilities of a stabilizer code with stabi- 
lizer group S in terms of the groups SZ{Gn) and Cg„{S). The phase information of an 
element in Gn is not relevant for questions concerning the detectability, since an element 
E of Gn is detectable if and only if ujE is detectable. Thus, if we associate with an element 
a;'^X(a)Z(b) of Gn an element (a|b) of F^", then the group SZ{Gn) is mapped to the 
additive code 

G = {(a|b) |u;^X(a)Z(b) e SZ{Gn)} = SZ{Gn) / Z{Gn). 

To describe the image of the centralizer, we need the notion of a trace-symplectic form of 
two vectors (a|b) and (a'|b') in F^**, 

((a|b)|(a'|b')). =tr,/p(b-a'-b'-a). 

The centralizer Cg„ {S) contains all elements of Gn that commute with each element of S; 
thus, by Lemma in.5, Gg„{S) is mapped onto the trace-symplectic dual code G-^" of the 
code C, 

G^' = {(a|b) |cu'=X(a)Z(b) e Gg^S)}. 

The connection between these classical codes and the stabilizer code is made precise in the 
next theorem. This theorem is essentially contained in [1 1] and generalizes the well-known 
connection to symplectic codes [35, 59] of the binary case. 
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Theorem III.13. An {{n, K, d))q stabilizer code exists if and only if there exists an additive 
code C < Ff" of size \C\ = q''/K such that C < C^^ and swt(C^^ \C) = difK > 1 
(and swt(C^^) = difK ^1). 

Proof Suppose that an ((n, K, d))q stabilizer code Q exists. This implies that there ex- 
ists a closed subgroup S of Gn of order \S\ — q^/K such that Q — Fix(5'). The 
group S is abelian and satisfies S n Z{Gn) = 1, by Lemma III. 10. The quotient C = 
SZ{Gn)/Z{G^) is an additive subgroup of F^" such that \C\ = \S\ = q"/K. We have 
C^' = CG„{S)/Z{Gn) by Lemma m.5. Since ,5 is an abeUan group, SZ{Gn) < Cg„{S), 
hence C < C-^\ Recall that the weight of an element uj'^X{a)Z{h) in Gn is equal to 
swt(a|b). If = 1, then Q is a pure quantum code, thus wt(CG„('S')) = swt(C-'-^) = d. 
If K > 1, then the elements of Gg„ (S) \ SZ{Gn) have at least weight d by Lemma HI. 1 1, 
so that swt(C-L^ \ C) = d. 

Conversely, suppose that C is an additive subcode of F^" such that \C\ = q^/K, 
C < and swt(C^^ \ C) = d if X > 1 (and swt(C^») = d if X = 1). Let 

N = {u;^X{a.)Z{h) \ce¥p and (a|b) e C}. 

Notice that is an abelian normal subgroup of G„, because it is the pre-image of C = 
N/Z{Gn). Choose a character x of A?^ such that x(a;'^l) = u;'^. Then 

is an orthogonal projector onto a vector space Q, because Pn is an idempotent in the group 
ring C[G„], see [88, Theorem 1]. We have 

dimg = TtPm= \Z{Gn)\qy\N\ = g7|C| = K. 

Each coset of N modulo Z(Gn) contains exactly one matrix E such that Ev = v for all v 
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in Q. Set S — {E & N \ Ev — v for all v e Q}. Then S is an abelian subgroup of Gn 
of order IS*] = \C\ = q^/K. We have Q = Fix(S'), because Q is clearly a subspace of 
Fix(5), but dimQ = = K. An element c^=X(a)Z(b) in Cg„(5) \ 5Z(G'„) cannot 

have weight less than d, because this would imply that (a|b) e C^^ \ C has weight less 
than d, which is impossible. By the same token, if = 1, then all nonidentity elements 
of the centralizer CaSS) must have weight d or higher. Therefore, Q is an ((n, K, d))q 
stabilizer code. □ 

The results of this paragraph were established by Ashikhmin and Knill [11]. It is in- 
structive to compare the two approaches, since their definition of the error basis is different 
(but equivalent). 



A drawback of the codes in the previous paragraph is that the symplectic weight is some- 
what unusual. In the binary case, reference [35] provided a remedy by relating binary sta- 
bilizer codes to additive codes over F4, allowing the use of the familiar Hamming weight. 
Somewhat surprisingly, the corresponding concept was not completely generalized to Fg2, 
although [86, 109] and [126] paved the way to our approach. After an initial circulation 
of the results in this chapter, Gottesman drew our attention to another interesting approach 
that was initiated by Barnum, see [21,22], where a sufficient condition for the existence of 
stabilizer codes is established using a symplectic form. 

Let /?^) denote a normal basis of Fq2 over Fg. We define a trace-alternating form 
of two vectors v and w in ¥\ by 



We note that the argument of the trace is invariant under the Galois automorphism x 1-^ x^. 



2. Codes over F^2 




(3.7) 
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so it is indeed an element of F^, which shows that (3.7) is well-defined. 

The trace-alternating form is bi-additive, that is, {u + v\w)a = (u\w)a + {v\w)a and 
{u\v + w)a = {u\v)a + {u\w) a holds for all u,v,w e F^2- It is Fp -linear, but not F^ -linear 
unless q — p and it is alternating in the sense that {u\u)a — holds for all u e F^2- We 
write U-LaW if and only if {u\w)a = holds. 

At this point it might be helpful to see the form the trace-alternating form takes in the 
binary case. A normal basis for F4 over F2 is given by {a;, o;^}. Since o;^ + a; + 1 = 0, the 
trace-alternating form simplifies to 

j = vw'^ + v'^-w, (3.8) 

where we have used the facts that = 1 and x = —x over F4. 

We define a bijective map that takes an element (a|b) of the vector space F^" to a 
vector in Fg2 by setting 0((a|b)) = /3a + /3*b. The map is isometric in the sense that the 
symplectic weight of (a|b) is equal to the Hamming weight of 0((a|b)). 

Lemma III.14. Suppose that c and d are two vectors of F^". Then 

{C\d)s^{ct>{c)\m)a. 

In particular, c and d are orthogonal with respect to the trace-symplectic form if and only 
if(f){c) and 4>{d) are orthogonal with respect to the trace-alternating form- 
Proof. Let c = (a|b) and d = (a'|b'). We calculate 

0(c) • (f){dy = a • a' + a • b' + b-a' + b • b', 
0(c)« • (f){d) = a • a' + a • b' + b-a' + b • b'. 
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Therefore, the trace-alternating form of 0(c) and (f){d) is given by 



m\m) 



a 




) 



trq/p{h • a' - a - b'), 



which is precisely the trace- symplectic form (c | d)s. 



□ 



Theorem III.15. An {{n, K, d))q stabilizer code exists if and only if there exists an additive 

subcode D of F^2 of cardinality \D\ = q'^/K such that D < D-^"- and wt(D-'-" \D) = d if 
K > 1 (and wt{D^'^) ^difK =1). 

Proof Theorem 111.13 shows that an ((n, K,d))g stabilizer code exists if and only if there 
exists a code C < F^" with \C\ = q'^/K, C < and swt(C^^ \ C) = difK > 1 (and 
swt(C-'-'') — d if K — 1). We obtain the statement of the theorem by applying the isometry 
(j). □ 

We obtain the following convenient condition for the existence of a stabilizer code as 
a direct consequence of the previous theorem. 

Corollary III.16. If there exists a classical [n, k]q2 additive code D < Fg2 such that D < 
D^"^ and d"*-" = wt{D-^'^), then there exists an [[n, n — 2k, > d-^^Wg stabilizer code that is 
pure to d^"-. 

Remark. It is not necessary to use a normal basis in the definition of the isometry and 

the trace-alternating form. Alternatively, we could have used a polynomial basis (1,7) of 
F^/F^. In that case, one can define the isometry cf) by 0((a|b)) — a-|- 7b, and a compatible 
trace-alternating form by 



One can check that the statement of Lemma HI. 14 is satisfied for this choice as well. Other 
variations on this theme are possible. 
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3. Classical Codes 

Self-orthogonal codes with respect to the trace-alternating form are not often studied in 
classical coding theory; more common are codes which are self-orthogonal with respect 
to a euclidean or hermitian inner product. We relate these concepts of orthogonality as 
follows. Consider the hermitian inner product • y of two vectors x and y in F^al we 
write X ±/j y if and only if x^ • y = holds. 

Lemma III.17. If two vectors x and y in F^a satisfy x ±h y, then they satisfy x ±a y. In 
particular, if D < F^2, then D^^^ < D^". 

Proof. It follows from x^ • y = that x • y^ = holds, whence 

x ■ y^ — x'' • y 



as claimed. □ 

Therefore, any self-orthogonal code with respect to the hermitian inner product is self- 
orthogonal with respect to the trace-alternating form. In general, the two dual spaces D-^^ 
and D-^" are not the same. However, if D happens to be F^2 -linear, then the two dual spaces 
coincide. 

Lemma III.18. Suppose that D < F^2 is Wg2-linear, then D^^ — D^"^. 

Proof. Let q — p^, p prime. If D is a A; -dimensional subspace of F^2, then D-^f" is an 
{n — A;) -dimensional subspace of F^2. We can also view as a 2mA;-dimensional subspace 

of Fp"*'*, and D-*-" as a 2m{n — A;) -dimensional subspace of F^™". Since D-^^ C and 
the cardinalities of D-^" and D-^>^ are the same, we can conclude that D-*-" — D-^**. □ 

Corollary III.19 (Hermitian Construction). If there exists an ¥q2-linear [n, k, d]q2 code B 
such that B-^^ < B, then there exists an [[n, 2k — n,> d]\q quantum code that is pure to d. 
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Proof. The hermitian inner product is nondegenerate, so the hermitian dual of the code 
D := is B. The [n, n - k]q2 code D is Fg2-linear, so D^>^ = D^- by Lemma IE. 18, 
and the claim follows from Corollary III. 16. □ 

So it suffices to consider hermitian forms in the case of Fg2 -linear codes. We have to 
use the slightly more cumbersome trace-alternating form in the case of additive codes that 
are not linear over Fq2. 

An elegant and surprisingly simple construction of quantum codes was introduced 
in 1996 by Calderbank and Shor [36] and by Steane [145]. The CSS code construction 
provides perhaps the most direct link to classical coding theory. 

Lemma III.20 (CSS Code Construction). Let Ci and denote two classical linear codes 

with parameters [n, fci, and [n, /c2, d'i\q such that < C\. Then there exists a [[n, ki + 
k2 — n, d]]q stabilizer code with minimum distance d — min{wt(c) | c e (Ci \ C^) U (C2 \ 
Ci)} that is pure to min{di, ^2}. 

Proof. Let C ^ x < F^". If (ci | C2) and (c[ \ 4) are two elements of C, then we 
observe that 

tr(c2 • c[ - 4 • ci) = tr(0 - 0) = 0. 

Therefore, C < C-^'. Furthermore, the trace-symplectic dual of C contains C2 x Ci, 
and a dimensionality argument shows that C-^' = C2 x Ci. Since the cartesian product 
^1 ^ ^2 g2n-(fei+fe2) elements, the stabilizer code has dimension q'^i+'^^-n Theo- 
rem in. 13. The claim about the minimum distance and purity of the code is obvious from 
the construction. □ 

Corollary III.21 (Euclidean Construction). IfC is a classical linear [n, /c, d\q code con- 
taining its dual, C"*- < C, then there exists an [[n, 2k — n,> d]]g stabilizer code that is pure 
to d. 
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D. Weight Enumerators 

The Shor-Laflamme weight enumerators of an arbitrary ((n, K))q quantum code Q with 
orthogonal projector P are defined by the polynomials 

n 

With Af^ = — J2 Tr{E^P)nEP), 



and 



1=0 EeGn 

wt{B)=i 

with Bt^^ Yl T^iE^PEP), 

i=0 EeGn 

see [141] for the binary case. The definition given here differs from the original definition 
by Shor and Laflamme by a normalization factor p, which is due to the sums running 
over the full error group G„. The theory of Shor-Laflamme weight enumerators [141] 
was considerably extended by Rains in [124, 125, 128, 129]. In this section we give a 
simple proof for the relation between these weight enumerators and the symplectic weight 
enumerators of the additive codes associated with the stabilizer code. 

The weights Af^ and Bf^ have a nice combinatorial interpretation in the case of sta- 
bilizer codes. Indeed, let C < F^" denote the additive code associated with the stabi- 
lizer code Q. Define the symplectic weights of C and C^" respectively hy Ai = |{c e 
C I swt(c) = i}\ and Bi — \{c E C"*"" | swt(c) =01- Th^ ^^^^ lemma belongs to the 
folklore of stabilizer codes. 

Lemma III.22. The Shor-Laflamme weights of an {{n, K))q stabilizer code Q are multiples 

of the symplectic weights of the associated additive codes C and C^^• more precisely, 



Af = pAi and Bf- = pBi for < i < n, 
where p is the characteristic of the field ¥q. 
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Proof. Recall that 




for the stabilizer group SofQ. The trace Tr (EP) is nonzero if and only if is an element 

of SZ{Gn). IfE^ e SZ{Gn), then Tr(Etp) Tr(EP) = (g"/!^!)^ = K\ Therefore, 
counts the elements in SZ{Gn) of weight i, so = \Z{Gn) | x |{c e C | swt(c) = i}| = 
pAi. 

If E commutes with all elements in S, then Tr{E^PEP) = Tr{P^) = Tr(P) = K. 
If E does not commute with some element of 5", then E is detectable; more precisely, the 
proof of Lemma HI. 11 shows that PEP = OP, hence Tr(E^PEP) = 0. Therefore, 
counts the elements in Cg„{S) of weight i, hence = x \{c e C^" \ swt(c) = 

Shor and Laflamme had been aware of the stabilizer case when they introduced their 
weight enumerators, so the combinatorial interpretation of the weights does not appear to 
be a coincidence. Recall that the Shor-Laflamme enumerators of arbitrary quantum codes 
are related by a Mac Williams identity, see [124, 141]. For stabilizer codes, we can directly 
relate the symplectic weight enumerators of C and 



using a simple argument that is very much in the spirit of Jessie Mac Williams' original 
proof for euclidean dual codes [106]. 



n 



n 



A{z) = Aiz' and B{z) = ^ Biz\ 




Theorem III.23. Let C be an additive subcode o/F^" with symplectic weight enumerator 

A{z). Then the symplectic weight enumerator ofC^" is given by 




Proof. Let x be a nontrivial additive character of Fp. We define for b e F^"^ a character Xb 
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of the additive group C by substituting the trace-symplectic form for the argument of the 
character x, such that 

Xb{c) = x{{c\b)s)- 

The character Xb is trivial if and only if b is an element of C-^" . Therefore, we obtain from 
the orthogonality relations of characters that 

„ I \C\ for beC^% 

cec otherwise. 

The following relation for polynomials is an immediate consequence 

E E Xb{c)z^^'^'^ = J2 ^'^'^'^Y.Xb{c) = \C\Biz). (3.9) 

The right hand side is a multiple of the weight enumerator of the code Let us have 
a closer look at the inner sum of the left-hand side. If we express the vector c e C in the 

form c = (ci, . . . , c„|(ii, . . . , (i„), and expand the character and its trace-symplectic form, 
then we obtain 

(n 
, , fc=i 

n 

= E n z'^^^^'^'^h (tr(4afe - bkCk)) 

(oi,...,a„|&i,...,6„)eF2" k=l 
n 

Recall that x is a nontrivial character of Fp, hence the map {ak\bk) ^ x(tr(cifcajt — bkCk)) 
is a nontrivial character of for all {ck\dk) ^ (0|0). Therefore, we can simplify the inner 
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sum to 

{ak\bk)&l i ^ ~ ^ (Cifc|4) 7^ (0, 0). 

It follows that 

Substituting this expression into equation (3.9), we find that 



|C| I^Vl + 



|c| Vi + (5'-i)^/' 

which proves the claim. □ 

The coefficient of in (1 + [q^ — l)^;)" ^(1 — zY is given by the Krawtchouk poly- 
nomial of degree j in the variable x. 



;f,w = t(-i)V-ir'g)("_; 



Corollary III.24. Keeping the notation of the previous theorem, we have 

1 

Proof. According to the previous theorem, we have 

(1 + - 1)2)" / 1-2 



1 



a;=0 

We obtain the result by comparing the coefficients of z^ on both sides. □ 
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The weight enumerators turn out to be very useful in estabUshing the bounds on quan- 
tum codes, as we will see in the next section. 

E. Bounds 

We need some bounds on the achievable minimum distance of a quantum stabilizer code. 
The main results in this section are the generalization of the linear programming bounds 
[35], alternative proofs for the nonbinary quantum Singleton bound using a generalization 
of the methods given in [12], a proof of the validity of the quantum Hamming bound for 
single error-correcting (degenerate) quantum codes (which generalizes an earlier result by 
Gottesman [61, Chapter 7]), a simpler nonconstructive proof for lower bounds on quantum 
codes, and an existence proof of a class of optimal quantum codes. 



We shall derive a series of upper bounds for nonbinary stabilizer codes. The first theorem 
yields a bound that is well-suited for computer search. 

Theorem III.25. If an {{n, K,d))q stabilizer code with K > 1 exists, then there exists a 
solution to the optimization problem: minimize ^^ij Aj subject to the constraints 

1. Aq — 1 and Aj > Ofor all 1 < j < n; 



1. Upper Bounds 



n 



Aj = q^/K; 



3=0 



K 



n 




r=0 



Kj(r)Ar holds for all j in the range < j < n; 




Bj for all j inO < j < d and Aj < Bj for all d < j < n; 



5. {p 



1) divides Ajfor all j in the range 1 < j <n. 
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Proof. If an ((n, d))^ stabilizer code exists, then the symplectic weight distribution of 
the associated additive code C satisfies conditions 1) and 2). For each nonzero codeword 
c in C, ac is again in C for all a in F*, so 5) holds. Corollary III.24 shows that 3) holds. 
Since the quantum code has minimum distance d, it follows that 4) holds. □ 

Remark III.26. If we are interested in bounds for F^2 linear codes, then we can replace 
condition 5) in the previous theorem by (f — 1 divides Aj for 1 < j < n. This will even 
help in characteristic 2. 

The next bound is more convenient when one wants to find bounds by hand. In par- 
ticular, any function / satisfying the constraints of the next theorem will yield a useful 
bound on the dimension of a stabilizer code. This approach was introduced by Delsarte for 
classical codes [47]. Binary versions of Theorem III.27 and Corollary III.28 were proved 
by Ashikhmin and Litsyn [12], see also [15]. 

Theorem III.27. Let Q be an ((n, K, d))q stabilizer code of dimension K > 1. Suppose 
that S is a nonempty subset of{0, . . . ,d — 1} and N — {0, . . . , n}. Let 



i=0 

be a polynomial satisfying the conditions 

i) fx > Ofor all X in S, and fx >0 otherwise; 

ii) f{x) < Ofor all x in N \ S. 

Then 

Proof Suppose that C < F'^"- is the additive code associated with the stabilizer code Q. 
If we apply Corollary ni.24 to the trace-symplectic dual code C-*-" of the code C, then we 
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obtain 

1 " 



Using this relation, we find that 

n 

\c^^\Y,fiA < |c^^l5]/iA 

n / -. n 

i=0 V ' x=0 

n n 

x=0 i=0 

By assumption, f{x) — Y1"=q fi^i{^)''> thus, we can simpUfy the latter inequality and 
obtain 

n 

i&S x=0 x&S x&S 

where the last equality follows from the fact that the stabilizer code has minimum distance 
d, meaning that — holds for all x in the range < x < d. We can conclude that 



\x&S J ' VieS / 



< max ■ , 



which proves the theorem, since \C^'' \ — q^K. □ 

The previous theorem implies the quantum Singleton bound. In general, linear pro- 
gramming yields better bounds, but for short lengths one can actually find codes meeting 
the quantum Singleton bound. 

Corollary III.28 (Quantum Singleton Bound). An {{n, K,d))q stabilizer code with K > 1 

satisfies 

K < q^-^d+\ 

The binary version of the quantum Singleton bound was first proved by Knill and 
Laflamme in [95], see also [12, 15], and later generalized by Rains using weight enumera- 
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tors in [126]. 

A more interesting application of Theorem 111.27 is to derive the quantum Hamming 
bound. The quantum Hamming bound states that any pure {{n,K,d))q stabilizer code 
satisfies 

L(d-1)/2J 

E r)(?'-ir<m, (3.10) 

see [55, 59]. Several researchers have tried to find impure stabilizer codes that beat the 
quantum Hamming bound. However, Gottesman has shown that impure single and double 
error-correcting binary quantum codes cannot beat the quantum Hamming bound [61]. In 
the same vein. Theorem ni.27 allows us to derive the Hamming bound for arbitrary stabi- 
lizer codes, at least when the minimum distance is small. We illustrate the method for single 
error-correcting codes, and note that the same approach works for double error-correcting 
codes as well. 

Corollary III.29 (Quantum Hamming Bound). An ((n, K,3))q stabilizer code with K > 1 
satisfies 

K < - 1) + 1). 

Proof. Recall that the intersection number of the Hamming association scheme H(n, q^) 
is the integer p^^- = |{^ g F^2 | d{x, z) — i, d{y, z) = j}|, where x and y are two vectors in 
of Hamming distance d{x, y) — k. The intersection numbers are related to Krawtchouk 
polynomials by the expression 

n 

see [20]. 

After this preparation, we can proceed to derive the Hamming bound as a consequence 
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of Theorem in.27. Let 

1 n 

j,k=0 i=0 

The triangle inequality implies that p'^j if one of the three arguments exceeds the sum 
of the other two; hence, f{x) = for x > 2. The coefficients of the Krawtchouk expansion 

f{x) = Yll=(ifi^i{^) obviously satisfy fi = {Ko{i) + i^i(i))^ > 0. A straightforward 
calculation gives 

/(O) = _ 1) + 1), = _ 1) + 1)2^ 

/(2) = 2g^ /2 = ((n-2)(g2-l)-lf. 

It follows that 

max{/(0)//o,/(l)//i,/(2)//2} < q'y{n{q' - 1) + 1) 

holds for all n > 5. Using Theorem 111.27, we obtain the claim for all n > 5. For the 
lengths n < 5, we obtain the claim from the quantum Singleton bound. □ 

One real disadvantage of Theorem in.27 is that the number of terms increase with the 
minimum distance and this can lead to cumbersome calculations. However, one can derive 
more consequences from Theorem III.27; see, for instance, [12, 15, 101, 1 10]. 

2. Lower Bounds 

Feng and Ma have recently shown a quantum version of the classical lower bounds by 
Gilbert and Varshamov [55]. We conclude this section by giving a simple proof for a 
weaker version of this result based on a counting argument. It must be remembered that 
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these lower bounds are nonconstructive. 

Our first lemma generalizes an idea used by Gottesman in his proof of the binary case. 

Lemma III.30. An {{n, K, > d))g stabilizer code with K > 1 exists provided that 

{q-K - q-/K) - 1)^' < {q''' - " 1) O-H) 

j=i VJ/ 

holds. 

Proof. Let L denote the multiset 

L = {C^- \ C\C <C^^ <¥f with |C| = q^'/K}. 

The elements of this multiset correspond to stabilizer codes of dimension K. Note that L 
is nonempty, since there exists a code C of size q^/K that is generated by elements of the 
form (a|0); the form of the generators ensures that C < C-'-^ 

All nonzero vectors in F^" appear in the same number of sets in L. Indeed, the sym- 
plectic group Sp(2n, ¥q) acts transitively on the set F^" \ {0}, see [74, Proposition 3.2], 
which means that for any nonzero vectors u and v in F^" there exists r e Sp(2n, F^) such 
that V = Tu. Therefore, u is contained in C"*-^ \ C if and only if v is contained in the 
element {tC)^' \tC of L. 

The transitivity argument shows that any nonzero vector in F^" occurs in \L\ [q^K — 
q^ / K)/{q^'^ — 1) elements of L. Furthermore, a nonzero vector and its F^ -multiples are 
contained in the exact same sets of L. Thus, if we delete all sets from L that contain a 
nonzero vector with symplectic weight less than d, then we remove at most 

Y.Um^'-^y {q-K-q-/K) 
p — 1 q"^"- — 1 

sets from L. By assumption, this number is less than \L\; hence, there exists an ((n, K, > 
(i)) 5 stabilizer code. □ 
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The Gilbert- Varshamov bound shows the existence of surprisingly good codes, even 
for smaller lengths, when the characteristic of the field is not too small. If n = A; mod 2, 
then we can significantly strengthen the bound. 

Lemma III.31. Ifk>l,n = k mod 2 and 

d-l . X 

^qn+k _ gu-k^ J2r.){q'-iy-'< {q''' - 1) (3.12) 
i=i ^''^ 

holds, then there exists an ¥g2-linear [[n, k, d]]q stabilizer code. 

Proof. The proof is almost the same as in the previous lemma, except that we list only 
codes C such that 0(C) is linear, meaning that 0(C) is a vector space over Fg2. We repeat 
the previous argument with the multiset 



C < C^^ < F2", |C| = 
0(C) is Fq2 -linear 



It is easy to see that L is not empty. Note that each set 0(C"'"^) \ 0(C) in L contains 
now all F^2 -multiples of a nonzero vector, not just the F^ -multiples, which proves the 
statement. □ 

Feng and Ma show that one can extend the previous result to even prove the existence 
of pure stabilizer codes, but much more delicate counting arguments are needed in that 
case, see [55]. We are not aware of short proofs for this stronger result. 

The previous lemma allows us to show the existence of good quantum codes, espe- 
cially for larger alphabets. We illustrate this fact by proving the existence of MDS stabilizer 
codes, see Section C for more details on such codes. 

Corollary III.32. If2<d<\n/2~\ and — 1 > (^), then there exists a linear [[n,n — 
2d + 2,d\]q stabilizer code. 
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Proof. The assumption d < \n/2 \ implies that (") < (2) < • • • < (^), so the maximum 
value of these binomial coefficients is at most — 1. Let k — n — 2d-\-2.lX. follows from 
the assumption that k>l and n = k mod 2. It remains to show that (3.12) holds. For the 
choice k — n — 2d-\-2,\hQ left hand side of (3.12) equals 



d-1 

_ /^2n-2d+2 „2d-2\ 

We claim that the latter term is less than g^" — 1. To prove this, it suffices to show that 



^2n-2d+2 (g' 1)' (g' 1) < ^2n (3 ^3) 

Q'^ — 2 



holds. The latter inequality is equivalent to {q^ — \Y < q^'^ — Ic^'^ ^ + — 1, and it is not 
hard to see that this inequality holds. Lideed, note that 

= ((g^ - 1) + 1)'^ = (g^ - 1)' + E (^^ - ^y- 

Recall that Q = (^^9 + C^^'); hence, 
q2d _ 2q2d-2 _ (^2 _ 

d-1 



j=0 



a{j):= 

We have a{j) — —a{d — j) for < j < d — 1, and a{j) > for j > d/2. This 
shows that all negative terms get canceled by larger positive terms and we can conclude 
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that q^'^ - 2q^'^ ^ - - I)'' > for d > 2; this impUes inequaUty (3.13) and consequently 
shows that (3.12) holds. □ 

Example III.33. Recall that there does not exist a [[7, 1, 4]] 2 code, see [35]. In contrast, 

the existence of a [[7, 1, 4]]^ code for all prime powers q > 7 is guaranteed by the preceding 
corollary. It also shows that there exist [[6, 2, 3]]qfor all prime powers q > 5 and [[7, 3, 3]]^ 
for all prime powers q >7, which slightly generalizes [53]. 

F. Code Constructions 

Constructing good quantum codes is a difficult task. We need a quantum code for each 
parameter n and k in our tables. In this section we collect some simple facts about the 
construction of codes. Lemmas ni.34-ni.36, (see also Table I), show how to lengthen, 
shorten or reduce the dimension of the stabilizer code. These generalize and extend the 
constructions for binary quantum codes [35, Theorem 6]. 

Table I. The existence of a pure [[n, k, d]]q stabilizer code implies the existence of codes 
with other parameters. 



n/k 


k-l 


k 


k+l 


n-1 


>d — l pure 

Lemma III.36 


> d—1 pure 

Lemma III.36 


d—1 pure 

Lemma in.35 


n 


> d pure 

Lemma III.36 


d pure 


d — 1 impure 

Lemma m. 34 


n + 1 


> d impure 

Lemma in.34 


d impure 

Lemma III.34 





Lemma III.34. If an [[n, k, d]]^ stabilizer code exists for k > 0, then there exists an impure 
[[n + l,k,d]]g stabilizer code. 
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Proof. If an [[n, k,d]]q stabilizer code exists, then there exists an additive subcode C < F^" 
such that \C\ = ^ C < and swt(C^» \ C) = d Define the additive code 

C = {(aa|60) I a e Fg, (a|6) G C}. 

We have |C"| = g^-'^+i. The definition ensures that C is self -orthogonal with respect to 
the trace- symplectic inner product. Indeed, two arbitrary elements {aa\hQ) and {a'a'\h'Q) 
of C satisfy the orthogonality condition 

{{aa\hQ)\{a'a'\h'Q))s = {{a\h)\{a'\h'))s + t^{a • - a' • 0) = 0. 

A vector in the trace-symplectic dual of C has to be of the form {aa\bQi) with {a\b) e C-*-" 
and CK e F^. Furthermore, 

swt(C"^^ \ C) = min{swt(aa|60) \ae¥g,a,be C^' \ C}, 

which coincides with swt(C"'"'' \ C). Therefore, an [[n + l,k,d]]q stabilizer code exists 
by Theorem III. 13. If d > 1, then the code is impure, because C'-^" contains the vector 
(OajOO) of symplectic weight 1. □ 

Lemma III.35. If a pure [[n, A;, stabilizer code exists with n>2 and d>2, then there 
exists a pure [[n — l,k + l,d — l\]q stabilizer code. 

Proof. If a pure [[n, k, d]], stabilizer code exists, then there exists an additive code D < F^2 
that is self-orthogonal with respect to the trace- alternating form, so that \D\ = g""*^ and 
wt{D^°-) = d. Let Dq" denote the code obtained by puncturing the first coordinate of 
Since the minimum distance of D-^"^ is at least 2, we know that = l^"*""! — q^^^, 

and we note that the minimum distance of Dq" is c? — 1. The dual of D^" consists of all 
vectors u in F^2~^ such that Ott is contained in D. Furthermore, if is an element of Dq, 
then Oii is contained in D; hence, Dq is a self-orthogonal additive code. The code Dq is of 
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size because 

dim Dq + dim D^^ = dim F^^^ 

when we view Dq and its dual as Fp- vector spaces. It follows that there exists a pure 
[[n — 1, A; + 1, d — l]]g stabilizer code. □ 

Lemma III.36. If a (pure) [[n, djjg stabilizer code exists, with k > 2 (k > 1), then there 

exists an [[n, /c — 1, d*]\q stabilizer code (pure to d) such that d* > d. 

Proof. If an [[n, fc, (i]]g stabilizer code exists, then there exists an additive code D < F"2 
such that D < D^°- with wi{D^°- \D) = d and \D\ = g""^. Choose an additive code 
of size l-Dfcl = g^-'^+i such that D < < -D^" < D^-. Since D < D^, we have 
D^" < D-^"^. The set = D^"- \ is a subset of \ D, hence the minimum weight 
d* of Sfc is at least d. This proves the existence of an [[n, k — 1, d*]] code. 

If the code is pure, then wt(£)-^'') = d; it follows from D^" < D^"" that wt(i:)^") > d, 
so the smaller code is pure as well. □ 

Corollary III.37. If a pure [[n, /c, d]]^ stabilizer code with n > 2 and d > 2 exists, then 
there exists a pure [[n — l,k,> d — l]]q stabilizer code. 

Proof. Combine Lemmas in.35 and in.36. □ 

Lemma in.38. Suppose that an {{n, K, d))q and an {{n', K', d'))q stabilizer code exist. 
Then there exists an {{n + n', KK', min((i, d'))q stabilizer code. 

Proof. Suppose that P and P' are the orthogonal projectors onto the stabilizer codes for the 

((n, K, d))q and ((n', K\ d'))q stabilizer codes, respectively. Then P ® P' h an orthogonal 
projector onto a XX'-dimensional subspace Q* of C'', where d = Let S and S' 

respectively denote the stabilizer groups of the images of P and P'. Then S* — {E ® 
E'\E eS,E' e S'} is the stabilizer group of Q*. 
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If an element F (S> F* of Gn <^ Gn' — G^+n' is not detectable, then F has to commute 
with all elements in S, and F' has to commute with all elements in S'. It is not possible 
that both F e Z{Gn)S and F' e Z{Gn')S' hold, because this would imply that F ® F' 
is detectable. Therefore, either F or F' is not detectable, which shows that the weight of 

F(g)F'isatleastmin((i, d'). □ 

Lemma III.39. Let Qi and Q2 be pure stabilizer codes that respectively have parame- 
ters [[n, /ci, (ii]]q and [[n, /c2, o?2]]- If Q2 Qi, then there exists a [[2n, ki + k2, d]]q pure 
stabilizer code with minimum distance d > min{2(i2, di}. 

Proof. The hypothesis implies that there exist additive subcodes Di < D2 of F^a such that 
Dm < -D^", \Dm\ = g"-*^*", and wt(L)^") = dm for m = 1, 2. The additive code 

D ^ {{u,u + v) \ u e Di,v e D2} <¥f 

is of size = g2n-(fci+fc2) jj^g trace-alternating dual of the code D is D^'^ = {('"' + 
v', v') I li' e D^^^v' e ^^''}. Indeed, the vectors on the right hand side are perpendicular 
to the vectors in D, because 

{{U, U + V)\{u' + V', V'))a = {u\u' + V')a + {u + v\v')a = 

holds for all M e Di,v e D2 and u' e D^^^v' G D^". We observe that D is self- 
orthogonal, D < D-^". The weight of a vector {u' + v',v') e -D"*"" \ D is at least 
min{2d2 , c^i } ; the claim follows. □ 

Lemma III.40. Let q be a power of two. If a pure [[n, ki, di]]q stabilizer code Qi exists 
that has a pure subcode Q2 Q Qi with parameters [[n, k2, rf2]]q such that ki > k2, then a 
pure [[2n, ki — k2, d]]q stabilizer code exists such that d > min {2di, ^2}. 

Proof. If an [[n^, k^, dm]]q stabilizer code exists, then there exists an additive code D^, < 
F^2 such that Dm < ^"^{0^^) = d, and \Dm\ ^ g''"''"' for m = 1, 2. The inclusion 
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Q2 Q Qi implies that Di < D2. Let D denote the additive code consisting of vectors of 
the form (w, u + v) such that u G 1?^° and v e Di. 

We claim that D-^" consists of vectors of the form u' + v') such that u' e D^'' and 
v' e D2. Indeed, let vi — {u,u + v) denote a vector in D, and let V2 — {u', u' + v') be a 
vector with u' e D^" and i^' e D2. We have 

(^'l|t'2)a = {u\u)a + + (mI^"')" + {'vW)a + 

The first two terms on the right hand side cancel because the characteristic of the field 
is even; the next two terms vanish since the vectors belong to dual spaces; the last term 
vanishes because v and v' are both contained in D2, and D2 is self-orthogonal. Therefore, 
v\ and V2 are orthogonal. The set { (u/, u' + v') \u' G D^'^ ,v' E D2} ^ -D"*"" has cardinality 
q2n+ki-k2^ SO it must bc equal to D-^" by a dimension argument. 

The Hamming weight of a vector {u', u' + v') in D-^" is at least min {2di, d2}, because 
u' e and v' e D2< □ 

Lemma III.41. Let qbea power of a prime. If an {{n, K, d))gm stabilizer code exists, then 
an {{nm, K, > d))q stabilizer code exists. Conversely, if an {{nm, K, d))q stabilizer code 
exists, then there exists an {{n, K, > [d/'m\))qm. stabilizer code. 

This lemma is implicitly contained in the paper by Ashikhmin and Knill [11]. 

Proof. Let B = . . . , /^m} denote a basis of F^m/Fg. If a is an element of F^m, then 
we denote by 63(0) the coordinate vector in given by 63(0) = (oi, . . . , a^), where 

A nondegenerate symmetric form on the Fg- vector space F^m is given by trqm/q{xy). 
It follows that the Gram matrix M — (trgm/g(/3j/3j))i<j is nonsingular. We have 
trqm./q{xy) — e^{xyMeji{y) for all x,y in F^m. We define an Fp-vector space isomor- 
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phism from F^^ onto F^""^ by 

M{a\b)) = ((eB(ai), . . . , eB(a„))|(MeB(6i), . . . , MeB(M))- 

It follows from the fact that tr^m /q(tr^/j,(x)) = tr^m for all x in F^m and the definition 
of the isomorphism </7b that (a | b) Lg {c\d) holds in F^" if and only if <^b ( (o 1 6) ) J-s ( (c| d) ) 
holds in F„2 

If an ((n, d))5m exists, then there exists an additive code C < F^^ of size |C| = 
g""V/C such that C < swt(C^^ \ C) = d if K > 1, and swt(C^O = if X = 
1. Therefore, the code ^Pb{C) over the alphabet is of size q^"^/ K, satisfies (^b(C') < 
Vb{C)^' < F^""^, and swt((/?B(C)^^ \ (^b(C)) = d if X > 1 and swt((/?B(C)^0 = if 
K — 1. Thus, an ((nm, A', d))g stabilizer code exists. 

The existence of an ((nm, K, d))q stabilizer code implies the existence of an ((n, K))qm 
stabilizer code; the claim about the minimum distance follows from the fact that ^ maps 
each nonzero block of m symbols to a nonzero symbol in F^m . □ 

We notice that there exists a basis B such that M is the identity matrix if and only if 

either q is even or both q and m are odd, see [139]. In that case, ip^ simply expands each 
symbol into coordinates with respect to B. 

G. Puncturing Stabilizer Codes 

If we delete one coordinate in all codewords of a classical code, then we obtain a shorter 
code that is called the punctured code. In general, we cannot proceed in the same way with 
stabilizer codes, since the resulting matrices might not commute if we delete one or more 
tensor components. 

Rains [126] invented an interesting approach that solves the puncturing problem for 
linear stabilizer codes and, even better, gives a way to construct stabilizer codes from arbi- 
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trary linear codes. The idea is to associate with a classical linear code a so-called puncture 
code; if the puncture code contains a codeword of weight r, then a self-orthogonal code 
of length r exists and the minimum distance is the same or higher than that of the initial 
classical code. Further convenient criteria for puncture codes are given in [71]. 

In this section, we generalize puncturing to arbitrary stabilizer codes and review some 
known facts. Determining a puncture code is a challenging task, and maynot always pos- 
sible to find it in closed form. In the next chapter we show how the results of this section 
can be applied to puncture quantum BCH codes. 

It will be convenient to denote the the pointwise product of two vectors u and v in 
by uv, that is, uv — {uiVi)^^-^^. Suppose that C < F^" is an arbitrary additive code. The 
associated puncture code Ps(C) C F^' is defined as 

P,(C) = {{bka', b'.akYU I {a\b), {a'\b') e C}^ . (3.14) 

Theorem III.42. Suppose that C is an arbitrary additive subcode ofW'^"' of size \C\ = 
q"'/K such that swt(C-'-^ \ C) = d. If the puncture code ^s{C) contains a codeword of 
Hamming weight r, then there exists an ((r, K*, d*))q stabilizer code with K* > K/q'^'^ 
that has minimum distance d* > d when K* > 1. If swt{C-^') = d, then the resulting 
punctured stabilizer code is pure to d. 

Proof Let a; be a codeword of weight r in the Ps(C). Define an additive code < F^" 
by 

= {{a\bx) I ia\b) e C}. 
If {a\bx) and {a'\b'x) are arbitrary elements of C^, then 

{{a\bx) I {a'\b'x))s = tr (j^i^ka'k - b'kak)xk^ = (3.15) 

by definition of P,(C); thus, < (C^)^^ 
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Let — {{ak\hk)kes\ G Cx} denote the restriction of Cx to the support S of the 
vector X. Since equation (3.15) depends only on the nonzero coefficients of the vector x, it 
follows that < (C^)^^ holds. 

We note that |C| > \C^\; hence, the dimension K* of the punctured quantum code is 
bounded by 

K* > q^/\C^\ > q^/\C\ = q'/{qyK) = K/q^-\ 

It remains to show that swt((C^)-'-'' \ C^) > d. Seeking a contradiction, we suppose 
that is a vector in (C^)"*"" \ such that swt{u^) < d. Let Ux — {a\h) denote the vector 
in (Cj;)-*-" that is zero outside the support of x and coincides with when restricted to the 
support of X. It follows that {ax\b) is contained in C"*-". However swt(ax|6) < d, so {ax\b) 
must be an element of C, since swt(C-'-'' \ C) = d. This implies that {ax\hx) is an element 
of Cx < (C'a;)-'-^ Arguing as before, it follows that {ax'^\bx) is in C and (ax^|6x^) is in Cx- 
Repeating the process, we obtain that = {ax'^'^\hx'^~^) is in C^, and we note that x"^'^ is 
the characteristic vector of the support of x. Restricting Vx in Cx to the support of x yields 
e C^, contradicting the assumption that e {C^)^' \ C^. 

Finally, the last statement concerning the purity is easy to prove (a direct generaliza- 
tion of the argument given in [7 1] for pure linear codes). □ 

If the code C is a direct product, as in the case of CSS codes, then the expression for 
the puncture code simplifies somewhat. 

Lemma III.43. IfCi and C2 are two additive subcodes ofW^, then 

Ps(Ci X C2) = {a6 I a e Ci, 6 e Cs}^ < F^. 

Proof. Since {ab \ a e Ci,b e C2) = {{ha' — h'a) | a, a' e Ci, 6, h' e C2), the claim about 
the orthogonal complements of these sets is obvious. □ 

Since many quantum codes are constructed from self-orthogonal codes C < C^, we 



64 



write 

Pe(C) = Fs{C xC) = {ab\a,be C}^. (3.16) 

H. Conclusions 

In this chapter we have further developed the theory of nonbinary stabilizer codes. After 
reviewing the basic theory of nonbinary stabilizer codes over finite fields, we introduced 
Galois -theoretic methods to clarify the relation between these and more general quantum 
codes. We showed the most general class of codes over quadratic extension fields that can 
be used to construct quantum codes are those that are self -orthogonal with respect to the 
trace alternating product. 

We gave simpler proofs for the existence of nonbinary quantum codes. We also gen- 
eralized the linear programming bounds for the nonbinary codes. Following Gottesman's 
lead [61], we were able to show that single and double error-correcting nonbinary stabilizer 
codes cannot beat the quantum Hamming bound. We conjecture that no quantum stabilizer 
code can exceed the quantum Hamming bound, but a proof is still elusive. We also gave 
methods to obtain new quantum codes from existing quantum codes. In particular, we 
developed the theory of puncture codes. 

There are open questions that the work in this chapter suggests. We could for instance 
start with a different choice of error basis [93], and one can develop a similar theory for 
such stabilizer codes. For example, one choice leads to self-orthogonal additive subcodes 
of X Zg instead of subcodes of xF^. It would be interesting to know how the stabilizer 
codes with respect to different error bases compare. To the best of our knowledge, such a 
comparison has not been made. 
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CHAPTER IV 

CLASSES OF STABILIZER CODES* 
In this chapter we shall take a constructive approach to our study of stabilizer codes giv- 
ing explicit constructions for many classes of codes. Much of the theory we developed in 
Chapter III will be brought to bearing with additional simplifications for the classes of lin- 
ear codes. In case of linear codes, our main methods of constructions will be the Hermitian 
construction and the CSS construction (Lemmas 111.19-111.21). Hence, we need to look 
for classical codes that are self-orthogonal with respect to the Hermitian or the Euclidean 
product or families of nested codes like the BCH codes. Additionally, we investigate the 
structural properties of nontrivial codes that meet the quantum Singleton bound and estab- 
lish bounds on the maximal length of such codes. We provide a concrete illustration of the 
theory of puncture codes developed in the last chapter by puncturing the quantum BCH 
codes. 

A. Quantum Cyclic Codes 

Cyclic codes are an interesting class of codes which have simple encoding and efficient 
decoding algorithms. Consequently, quantum cyclic codes have also generated interest. 
Before we construct quantum cyclic codes we need the following results for identifying 
cyclic codes that contain their duals. We have not been able to trace the references that 
first proved these results, but we note that these conditions have been established in various 
forms earlier, especially for codes over F2 and F4; see [76, Chapter 4] for general results 
concerning classical codes and [35,70] for results concerning binary quantum codes. We 

*(c)2006 IEEE. Reprinted in part, with permission, from A. Ketkar, A. Klappenecker, 
S. Kumar and R K. Sarvepalli, "Nonbinary stabilizer codes over finite fields". IEEE Trans. 
Inform. Theory, vol. 52, no. 11, pp. 4892^914, 2006. 
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provide a convenient and unified treatment while giving the nonbinary equivalents. 

Recall that a classical cyclic code with parameters [n, /c]g is a principal ideal in the ring 
Fg[x]/ (x" — 1) and can be succinctly described by its generator polynomial or its defining 
set. The polynomial — 1 of Fg[x] has simple roots if and only if n and q are coprime. If 
the latter condition is satisfied, then there exists a positive integer m such that the field F^m 
contains a primitive nth root of unity In that case, one can describe a cyclic code with 
generator polynomial g{x) in terms of its defining set Z — {k\ g{P'^) = for < A; < n}. 
Further details on cyclic codes can be found in any standard textbook on coding theory, 
see [76] or [107]. 

In the case of cyclic codes, identifying the self -orthogonal codes can be translated into 
equivalent conditions on the generator polynomial of the code or its defining set. First we 
shall consider codes over ¥q2. Let a denote the automorphism of the field ¥q2 given by 
a{x) — x"^. We can define an action of a on the polynomial ring Fg2 [x] by 

n n 

h{x) = ^ hkx'' I — > h'^{x) = ^ a{hk)x^. 

k=0 k=0 

Lemma IV.l. Suppose that B is a classical cyclic [n, k, d\g2 code with generator polyno- 
mial g{x) and check polynomial h{x) = {x"" — l)/g{x). If g{x) divides a{ho)~^x''h'^ (l/x), 
then B-^'^ C B, and there exists an [[n, 2k — n,> d]]q stabilizer code that is pure to d. 

Proof. If h{x) is the check polynomial of B, then h"'{x) is the check polynomial of a{B). 
The generator polynomial of the dual code cr(B)-^ — B-^^^ is given by a{ho)~^x'^h'^{l/x), 
the normalized reciprocal polynomial of h'^{x). Therefore, the condition that the poly- 
nomial g{x) divides a{hQ)~^x^lf{ll x) is equivalent to the condition B-^*" C B. The 
stabilizer code follows from Corollary EI. 19. □ 

The following Lemma summarizes various equivalent conditions on dual containing 
codes in terms of the generator polynomial g{x) and the defining set Z. 
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Lemma rV.2. Let gcd(n, q^) — 1 and C be a classical cyclic [n, k, d]q2 code whose gener- 
ator polynomial is g{x) and defining set is Z. Suppose that any of the following equivalent 
conditions are satisfied 

f/) — 1 = mod g{x)g*{x) where g*{x) — x^'^g'^{l/x); 

(ii)Z'Z {-qz\z e N\Z}; 

(Hi) ZnZ-1 = 0, where Z"" = {-qz \ z e Z}. 

Then C^^ C C and there exists an [[n, 2k — n,> d]\g stabilizer code that is pure to d. 

Proof. Let h{x) — {x'^ — l)/g{x) be the check polynomial of C. Then h'^{x) — a{{x"' — 
l)/g{x)) — (x" — l)/g'^{x). From Lemma IV.l we know that C contains its Hermitian 
dualif g(x) divides a(/io)^"'^a;'^/i'^(l/a;) viz. g{x)\a{hQ)^^{l — x^) / {x'^~^ g'^ {1 / x)) , which 
implies x^ — 1 = Q mod g{x)g*{x) which proves (i). 

The generator polynomial g{x) of C is given by g{x) — Y\zezi^ ~ /^^)' hence its 
check polynomial is of the form 

h{x) = {x^'-l)/g{x)= W {x-n- 

zeN\z 

Applying the automorphism a yields h"{x) = n^ejv\z(^ ~ Z^"^^)- Therefore, the generator 
polynomial of C-^^ is given by 

in the last equality, we have used the fact that h"^ (0) ^ — Yl.zeN\ z 

By Lemma IV.l, 

B-^^ C B if and only if the generator polynomial g{x) divides h"'{0)''^x'^h"'{l/x). The lat- 
ter condition is equivalent to the fact that Z is a subset of {~qz \ z G N \ Z} and (ii) 
follows. From (ii) we know that C-^^ C C if and only if Z C {—qz \ z e N \ Z}. In other 
words Z-1 C N\ Z. Hence Z n Z"* = 0. An [[n, 2k-n,> d]]q stabilizer code follows 
from Corollary III. 19. □ 
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Cyclic codes that contain their EucUdean duals can also be nicely characterized in 
terms of their generator polynomials and defining sets. The following Lemma is a very 
straight forward extension of the binary case and summarizes some of the known results 
in the nonbinary case as well, but we include it because of its usefulness in constructing 
cyclic quantum codes. 

Lemma IV.3. Let C be an [n, fc, d\q cyclic code such that gcd(n, q) = 1. Let its defining set 
Z and generator polynomial g{x) be such that any of the following equivalent conditions 
are satisfied 

(i) — 1 = mod g{x)g'''{x), where g^{x) = x'^~^g{l/x); 

(ii) ZQ {-z \ zeN\Z}; 

(Hi) Z n Z"^ = where Z'^ = {-z mod n\ze Z}. 

Then C C and there exists an [[n, 2k — n,> d\]g stabilizer code that is pure to d. 

Proof. The check polynomial of C is given by h{x) — (x" — l)/g{x), from which we 
obtain the (un-normalized) generator polynomial of C"*- as h'^{x) = x^h{x~^) = (1 — 
x'^)/{x'^-^g{x-^)) = -(x" - 1)1 g\x). li C C, then g{x) \ h^{x); this means that 
g{x) divides (x" — l)/g\x). In other words — 1 = mod g{x)g^{x). 

The defining set of is given by {—z mod n \ z E N\Z}, where = {0, 1, . . . , n— 
1}. Thus C"*- C C implies Z C {—z mod n \ N \ Z}. Since this means that the inverses 
of elements in Z are present in N \ Z, this condition can also be written as Z (1 Z~^ — 0. 
The existence of quantum code [[n, 2k — n,> d]]q follows from Corollary III.21. □ 

Although we have considered purely cyclic codes, a larger class of cyclic quantum 
codes can be derived by considering constacyclic or conjucyclic codes as in [35], [154]. 
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1. Cyclic Hamming Codes 

Binary quantum Hamming codes have been studied by various authors; see for instance 
[35, 54, 59]. We now derive stabiUzer codes from nonbinary classical cyclic Hamming 
codes. Let m > 1 be an integer such that gcd(g — 1, m) = 1. A classical cyclic Hamming 
code Hq{m) has parameters [n, n — m, 3]^ with length n — {q^ — l)/(g — 1). Let P denote 
a primitive nth root of unity in F^m. The generator polynomial of Hq{m) is given by 

m— 1 

gix)=l[{x-(3'^'), (4.1) 

i=0 

an element of ¥q[x]. Thus, the code Hq{m) is defined by the cyclotomic coset Ci = 

{g* mod n I i e Z}. 

Lemma IV.4. The Hamming code Hq2 (m) contains its Hermitian dual, that is, Hq2 (m)^'^ < 
Hq2{m). 

Proof. The statement Hq2{rn)-^^ < Hq2{rn) is equivalent to the fact that the cyclotomic 
coset Ci satisfies Ci C Ni — {—qz mod n \ z E N \ Ci}, where N — {0, . . . ,n — 1} and 
n — {q^'^ — 1)/ {q^ — !)• We note that Ci can be expressed in the form 

Ci = 1(1 - n)q^^ mod n I A; G z| 

' (4.2) 

= ^-qzq^^ mod n k e , 

where z = — l)/{q'^ — 1). Therefore, the condition Ci C Ni holds if and only if 

C,CN\Ci holds, where = {zq^^ mod n\j e Z}. 

Seeking a contradiction, we assume that the two cyclotomic cosets Ci and have an 
element in common, hence are the same. This means that there must exist a positive integer 
k such that q'^^ — — 1)/ {(f — !)• This implies that g^fe-i divides g2m-2 _ -^^ yvhich 

is absurd. Thus, the sets Ci and are disjoint, hence Q N \ Ci, which proves the 
claim. □ 
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Theorem rV.5. For each integer m > 2 such that gcd(m, — 1) — 1, there exists a pure 
[[n, n — 2m, 3]]q stabilizer code of length n = (g^"* ~ 1)/ {(f — !)• 

Proof. If gcd(m, — 1) = 1, then there exists a classical [n, n — m, 3]q2 Hamming code 
Hq2 (m). By Lemma IV.4, we have Hq2 (m)-^^ < Hq2 (m), hence there exists a pure [[n, n — 
2m, 3]]g stabilizer code by Corollary 111.19. The purity is due to the fact that the Hq2 (m)-^^ 
has minimum distance qi2m-2 > 3 for m > 2 [76, Theorem 1.8.3]. □ 

These quantum Hamming codes are optimal since they attain the quantum Hamming 
bound, see Corollary III.29. A different approach that allows construction of noncyclic 
perfect quantum codes can be found in [28]. It is also possible to construct quantum codes 
from Hamming codes that contain their Euclidean duals, however these codes do not meet 
the quantum Hamming bound. 

Lemma IV.6. Ifgcd{m, q — 1) = 1 and m > 2, then there exists a pure [[n, n — 2m, 3]]q 
quantum code, where n = (g"* — l)/{q — 1). 

Proof. The generating polynomial of an [n,n — m,3]q Hamming code, with n=(g™ — 
— 1) is given by equation (4.1) where /? is an element of order n. The code ex- 
ists only if gcd(m, g — 1) = 1. By Lemma IV.3 a cyclic code contains its dual if — 1 = 
mod g{x)g'^{x), where g\x) = x"-^^g{x^^). If g{x) is not self-reciprocal then g{x)g\x) 
divides — 1 [152]. Since the generating polynomial of the Hamming code is not self- 
reciprocal, the code contains its Euclidean dual. By Lemma IV.3 we can construct a quan- 
tum code with the parameters [[n, n — 2m, 3]]^. Once again the purity follows due to the fact 
the duals of Hamming codes are simplex codes with weight q"^~^ > 3 for m > 2 [76, The- 
orem 1.8.3]. □ 
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2. Quantum Quadratic Residue Codes 

Another well known family of classical codes are the quadratic residue codes. Rains con- 
structed quadratic residue codes for prime alphabet in [126]. In this section we will con- 
struct two series of quantum codes based on the classical quadratic residue codes over an 
arbitrary field using elementary methods. 

Let a. denote a primitive nth root of unity from some extension field of F^. We denote 
by i? = {r^ mod n | r G Z such that l<r<(n— l)/2} the set of quadratic residues 
modulo n and by = {1, . . . , n — 1} \ i? the set of quadratic non-residues modulo n. 

Let Cr and Cat denote the cyclic codes of length n that are respectively generated by 
the polynomials qRix) and q^ix), where 

Both codes have parameters [n, {n + l)/2, 0?]^ with (i^ > n, see [27, pp. 114-119] or [76]. 
The codes with generator polynomials {x — V)qji{x) and {x — V)q^{x) are the even-like 
subcodes of Cr and Cat respectively and have the parameters [n, (n— 1)/2, d'jg with d! > d. 
The relevance of these codes will become apparent in the following theorems. 

Theorem rV.7. Let n be a prime of the form n = 3 mod 4, and let q be a power of a 

prim.e that is not divisible by n. If q is a quadratic residue modulo n, then there exists a 
pure [[n, 1, ci]]g stabilizer code with minimum distance d satisfying d^ — d + 1 > n. 

Proof The code Cr has parameters [n, (n + l)/2, d]q and if n = 3 mod 4, the dual code 
of Cr is given by the cyclic code generated by {x — l)qR{x), the even-like subcode of 
Cr. The minimum distance d is bounded hy d'^ — d+1 > n, see, for instance, [27, pp. 1 14- 
119]. Further wt(C/j \ Cj^) = wt (Ci?) = dhy [76, Theorem 6.6.22]. We can deduce from 
Corollary III.21 that there exists a pure [[n, {n + 1) — n, d]]q stabilizer code. □ 

For example, the prime p = 3 is a quadratic residue modulo n — 23. The previous 
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proposition guarantees the existence of a [[23, l,d\]3 stabilizer code with minimum distance 
d>6. 

If n is an odd prime of the form n = 1 mod 4, then we can also construct quadratic 
residue codes, but now we need to employ Lemma in.20, because Cr does not contain its 
dual. 

Theorem rV.8. Let n be a prime of the form n = 1 mod 4. Let q be a power of a prime 
that is not divisible by n. If q is a quadratic residue modulo n, then there exists a pure 
[[n, 1, stabilizer code with minimum distance d bounded from below by d> \pn. 

Proof. The dual code of Cr is given by the even-like subcode of Cjv; in other words, Cr 
is a cyclic code of length n over that is generated by the polynomial {x — '\)q^{x)\ vd 
particular, Cr < Cn- Moreover wt(Cij \ C^) = wt{CN \ Cr) = wt(Ci?) = wt(CAr) = d 
by [76, Theorem 6.6.22]. Therefore, we obtain a pure [[n, {n + 1) /2 + {n + 1) /2 — n, d]]q 
code by Lemma in.20. □ 

B. Quantum BCH Codes 

In this section we consider a popular family of classical codes, the BCH codes, and con- 
struct the associated nonbinary quantum stabilizer codes. Binary quantum BCH codes were 
studied in [35,43, 68, 146]. The CSS construction turns out to be especially useful, because 
BCH codes form a naturally nested family of codes. In case of primitive BCH codes over 
prime fields, the distance of the dual is lower bounded by the generalized Carlitz-Uchiyama 
bound, and this allows us to derive bounds on the minimum distance of the resulting quan- 
tum codes. 
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1. BCH Codes. 

Let g be a power of a prime and n a positive integer that is coprime to q. Recall that a BCH 
code C of length n and designed distance S over is a cyclic code whose defining set Z 
is given by a union of 6 — 1 subsequent cyclotomic cosets, 

b+5-2 

Z — Cx, where Cx = {xq^ mod n | r G Z, r > 0}. 

x=b 

The generator polynomial of the code is of the form 

where (3 is a primitive n-th root of unity of some extension field of ¥g. The definition 
ensures that g{x) generates a cyclic [n, k, d\q code of dimension k — n—\Z\ and minimum 
distance d > 5. If 6 = 1, then the code C is called a narrow-sense BCH code, and if 
n = — 1 for some m > 1, then the code is called primitive. More precise statements 
can be made about the structure of primitive, narrow-sense codes than the other classes of 
BCH codes and we will restrict our attention to these in this paper. More details on BCH 
codes can be found in [76, 107]. 

2. Generalized Carlitz-Uchiyama Bound. 

Our first construction derives stabilizer codes from BCH codes over prime fields. We use 
the Knuth-Iverson bracket [statement] in the formulation of the Carlitz-Uchiyama bound 
that evaluates to 1 if statement is true and otherwise. 

Lemma IV.9 (Generalized Carlitz-Uchiyama Bound). Let p be a prime. Let C denote a 
narrow-sense BCH code of length n = — 1 over Wp, of designed distance 6 = 2t -\- 1. 
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Then the minimum distance d"*" of its Euclidean dual code C"*" is bounded by 

Proof. See [149, Theorem 7]; for further background, see [107, page 280]. □ 

Theorem IV.IO. Let p be a prime. Let C be a \p'^ — l,k,> S]p narrow-sense BCH code 
of designed distance 5 — 2t + 1 and C* a — 1, /c*, BCH code such that C C C*. 
Then there exists a [[p™ — 1, /c* — /c, > min{(i*, stabilizer code, where is given 

by (4.3). 

Proof. The result follows from applying Lemma IV.9 to C and Lemma III.20 to the codes 
C and C*. □ 

Remark IV.ll. (i) The Carlitz-Uchiyama bound becomes trivial for larger design dis- 
tances, (ii) In [111, Corollary 2] it was shown that for binary BCH codes of design dis- 
tance d, the lower bound in equation (4.3) is attained when n = 2^"^ — 1, where a is the 
smallest integer such that c? — 2 | 2" + 1 and b is odd. (Hi) For a further tightening of the 
Carlitz-Uchiyama bound see [112, Theorem 2]. 

3. Primitive BCH Codes Containing Their Duals. 

We can extend the results of the previous section to BCH codes over finite fields that are 
not necessarily prime. In fact, if we restrict ourselves to smaller designed distances, then 
we can even achieve significantly sharper results. We will just review the results and refer 
the reader to our companion paper [4] for the proofs. A generalization of the following 
results is given in Chapter IX, with a view to demonstrate the fact that study of quantum 
codes can lead to interesting insights into classical coding theory. 

In the BCH code construction, it is in general not obvious how large the cyclotomic 
cosets will be. However, if the designed distance is small, then one can show that the 
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cyclotomic cosets all have maximal size. 

hemmsiTV.12. A narrow-sense, primitive BCH code with design distance 2 <5< q\'^/'^'^ + 

1 has parameters [q'^ — 1, q'^ — 1 — m\ {5 — — 1/q)] , > S]q. 

Proof. See [4, Theorem 7]; the binary case was already established by Steane [146]. □ 

In the case of small designed distances, primitive, narrow-sense BCH codes contain 
their Euclidean duals. 

Lemma rV.13. A narrow-sense, primitive BCH code over contains its Euclidean dual 
if and only if its design distance satisfies 2 < S < gTm/si _ i _ (^q _ 2)[m odd], where 
n = q^ — 1 and m>2. 

Proof See [4, Theorem!]. □ 
A simple consequence is the following theorem: 

Theorem rV.14. IfC is a narrow-sense primitive BCH code over with design distance 

2 < 6 < gr™/2l - 1 - (g - 2)[m odd] and m > 2, then there exists an [[g™ - 1, - 1 - 
2m\{5 — 1) (1 — , > (^jjq stabilizer code that is pure to 5. 

Proof If we combine Lemmas IV. 12 and IV. 13 and apply the CSS construction, then we 
obtain the claim. See [4] for details about purity. □ 

One can argue in a similar way for Hermitian duals of primitive, narrow-sense BCH 
codes. 

Theorem IV.15. IfC is a narrow-sense primitive BCH code over F^2 with design distance 
2<S <q'^-l, then there exists an [[q^"^ - 1, g^"* _ i _ 2m\{5 - 1)(1 - , > 5]]^ 

stabilizer code that is pure to 5. 

Proof See [4] for details. □ 
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When m = 1, the BCH codes are the same as the Reed Solomon codes and this case 
has been dealt with in [7 1]. An alternate perspective using Reed-MuUer codes is considered 
in [134]. 

4. Extending Quantum BCH Codes 

It is not always possible to extend a stabilizer code, because the corresponding classical 
codes are required to be self-orthogonal. We now show that it is possible to extend narrow- 
sense BCH codes of certain lengths. 

Lemma rV.16. Let Fg2 be a finite field of characteristic p. IfC is a narrow-sense [n, k, > 
d]q2 BCH code such that C-^^ C C and n = —1 mod p, then there exists an [[n, 2k — n,> 
d\ ] q stabilizer code that is pure to d which can be extended toan[[n+l,2k—n—l,> d+ 1] ] q 
stabilizer code that is pure to d+ 1. 

Proof. Since C-^^ C C, Corollary 111.19 implies the existence of an [[n, 2k — n,> d]]q 
quantum code that is pure to d and being narrow-sense the parity check matrix of C has the 
form 

la ■■■ q;("-i) 

1 Q;2(2) ... Q,2{n-1) 

H ^ 

1 a^-^ ... Q,(n-i)(<i-i) 

where a is a primitive n*'* root of unity. This can be extended to give an [n + 1, /c, d + 1] 
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code Ce, whose parity check matrix is given as 



11 1 

la 

1 a2(2) 



(n-l) 



1 





a 



2(n-l) Q 



We show that C^^ is self-orthogonal. Let Ri be the i*'* row in iJe- For 2 < i < o? the 
self-orthogonality of H implies that {Ri\Rj)h — 0. We need to show that {Ri\l)h — 0, 



1 < i < d. For 2 < i < d we have {Ri\l)h = J21=o 



a- 



(a"' - l)/(a* - 1) = 0, as 



a'^ — 1 and a* 7^ 1. For i = 1 we have {l\l)h — n + l mod p, which vanishes because of 
the assumption n = —1 mod p. 

Now we show that the rank of is d, thus Ce has a minimum distance of at least 
d+ 1. Any d columns of Hg excluding the last column form ad x d vandermonde matrix 
which is nonsingular, indicating that the d columns are linearly independent. If we consider 
any set of d columns that includes the last column, we can find the determinant of the 
corresponding matrix by expanding by the last column. This gives usad — Ixd— 1 
vandermonde matrix with nonzero determinant. Thus any d columns of are independent 
and the minimum distance of Ce is at least d + 1. Therefore Ce is an [n + 1, k,> d + l]g2 
extended cyclic code such that C^^ C Cg. By Corollary 111.19 it defines an [[n + 1,2k — 
n — 1,> d+ l]\q quantum code pure to d + 1. □ 

Corollary rV.17. For all prime powers q, integers m > 1 and all 5 in the range 2 < S < 
q"^ — 1 there exists an 

^^^2m^ q2m_^_ ^^^^^ _ ^^^^ _ y^2^^ ^ > ^ ^ ^J]^ 



Stabilizer code pure to S + 1. 
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Proof. The stabilizer codes from Theorem rV.15 are derived from primitive, narrow-sense 
BCH codes. If p denotes the characteristic of Fg2, then g^™ — 1 = — 1 modp, so the 
stabiUzer codes given in Theorem IV. 15 can be extended by Lemma IV. 16. □ 

A result similar to Lemma IV. 16 can be developed for BCH codes that contain their 
Euclidean duals. 

5. Puncturing BCH Codes. 

In this section, let BCH^(5) denote a primitive, narrow-sense g-ary BCH code of length 
n = — 1 and designed distance 5. We illustrate the theory of puncture codes developed 
in Chapter III by puncturing such BCH codes. Some knowledge about the puncture code 
is necessary for this task, and we show in Theorem IV. 19 that a cyclic generalized Reed- 
MuUer code is contained in the puncture code. 

First, let us recall some basic facts about cyclic generalized Reed-MuUer codes, see [16, 
17,80, 1 17] for details. Let Lm{i/) denote the subspace of Fq[xi, . . . , Xm] consisting of poly- 
nomials of degree < u, and let (Pq, . . . , Pn-i) be an enumeration of the points in where 
Pq = 0. The g-ary cyclic generalized Reed-MuUer code 7^*(t^, m) of order v and length 
n — q'^ — lis defined as 

ni{u,m)^{evf\feLrn{iy)}, 

where the codewords are evaluations of the polynomials in all but Pq defined hy ev f — 
(/(Pi), . . . , /(P„_i)). The dimension k*{iy) of the code 7^*(z^, m) is given by the formula 
= Er=o(-l)'(7)CT7/') and its minimum distance d*(t/) = (P + l)g« - 1, where 
m{q - 1) - u ^ {q - 1)Q + R with < P < g - 1. The dual code of TZ*{iy, m) can be 
characterized by 

ni{v,m)^ = {evf\feLl^{v^)}, (4.4) 
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where — m{q — 1) — u — 1 and L^{i^) is the subspace of all nonconstant polynomials 

in Lm(z/); 

It is well-known that a primitive, narrow-sense BCH code contains a cyclic generalized 
Reed-MuUer code, see [80, Theorem 5], and we determine the largest such subcode in our 
next lemma. 

Lemma IV.18. Letu^ {m-Q){q-l)-R,withQ = [log^(5+l)J andR = \{S+l)/q^]- 
1, thenn*{iy,m) C BCH™(5). Also for all orders v' > v, we have n*g{iy' , m) % BCH^((5). 

Proof. First, we show that TZ*{i',m) C BCH™(5). Recall that the minimum distance 
d*{u) ^ {R + l)q'^ - 1, where m{q - 1) - u ^ {q - 1)Q + R with < R < q - 1. 
By [80, Theorem 5], we have n*g{u,m) C BCH^((i? + 1)^^-1). Notice that {R + 
l)qQ -1=\{S + l)/q^]q^ - 1 > (5, so BCH™((i? + - 1) C BCH™(5). Therefore, 
n*g{u, m) C BCH^((5), as claimed. 

For the second claim, it suffices to show that 7?.*(i^ + is not a subcode of 
BCH™ (5). We prove this by showing that the minimum distance d*{iy + 1) < 6. No- 
tice that 

{q-l)Q + R-l, R>1, 
iq-l)iQ-l) + q-2, R^O 
with R and Q as given in the hypothesis. Therefore, the distance d* {v -I- 1) of 7^* (i/ -I- 1, m) 
is given by 



m{q — 1) — {u + 1) 



d*{iy + l) = 



{\{d + l)/q^]-l)q^ -1 fori?>l, 
{q - l)q^-^ - 1 for i? = 0. 



In both cases, it is straightforward to verify that d* {p + 1) < 5. □ 

Explicitly determining the puncture code is a challenging task. For the duals of BCH 
codes, we are able to determine large subcodes of the puncture code. 
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Theorem IV.19. If 5 < gLW2j _ then 7^*(//,m) C Pe(BCH^(5)^) /or a// orders pi 
in the range < n < m{q — 1) — 2(i? + {q — + 1 with Q = Llogg(5 + 1)J and 
R^\{S + l)/q'^] - 1. 

Proof. By Lemma IV. 18, we have TZ*g{u, m) C BCH^(5) for u = {m - Q){q - 1) - R; 
hence, BCH^(5)"'" C TZ*{iy, m)"*". It follows from the definition of the puncture code that 

Pe(BCH^(5)^) D Pe(7^;(^/,m)^). However, 

Pe(7^;(^/,m)^) = {evf-evg\f,geLl{u^)}^, 
D {evf\feLl{2u^)}^, 
= 7^;((2^.^)^,m), 

where the last equality follows from equation (4.4). This is meaningful only if > 

or, equivalently, if u > {m{q - 1) - l)/2. Since 5 < gL^/^J _ follows that Q < 
[m/2\ — 1, and the order u satisfies 

i/ = {m-Q){q-l)-R>\m/2 + l]{q-l)-R 
> \m/2] (g - 1) + 1 > (miq - 1) - l)/2, 

as required. Since 7?.*(yU, m) C 7?.*((2i/-^)-^, m) for < < {21/^)^, we have 7?.*(yU, m) C 
Pe(BCH-(5)^). □ 

Unfortunately, the weight distribution of generalized cyclic Reed-MuUer codes is not 
known, see [38]. However, we know that the puncture code of BCR'^{S)-^ contains the 

codes 7^*(0,m) C7^*(l,m) C ■■■ C 7^*(m(g - 1) - 2(i? + (g - l)g) + 1, m), so it must 
contain codewords of the respective minimum distances. 

Corollary IV.20. If S and ji are integers in the range 

m(q - 1) - 2(R + (q - 1)Q) + 1, where Q = [logg(5 + 1)J and R^\(5+ l)/q^] - 1, 
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then there exists a 

> - 2m\{5 - 1)(1 - l/g)l, > 5\\, 

stabilizer code of length d*{ii) = (p + 1)^'^ — 1, where a and p satisfy the relations m{q — 

1) — /X = (g — l)cr + p and < p < g — 1. 

Proof. \f 2 < 5 < gL"»/^-l — 1, then from Theorem IV. 14 we know that there exists an 
[[q"^ - 1, g'" - 1 - 2m[(5 - 1)(1 - , > quantum code. From Lemma IV. 19 we 
know that Pe(BCH^(5)^) D 7e;(p, m), where < p < m{q-l)-2{q-l)Q-2R+l. By 
Theorem in.42, if there exists a vector of weight r in Pe(BCH^(5)-'-), the corresponding 
quantum code can be punctured to give [[r, > r — 2m\(5 — 1)(1 — l/q)]),d > 5]]q. The 
minimum distance of 7?.* (p,m) isd*{p) = (p+l)g'^ — l, where < p < q—l [80, Theorem 
5]. Hence, it is always possible to puncture the quantum code to [[d*{p), > d*{p)—2m\{S— 

m-l/q)^,>6]],. □ 

It is also possible to puncture quantum codes constructed via classical codes self- 
orthogonal with respect to the Hermitian inner product. Examples of such puncturing can 
be found in [71] and [134]. 

C. MDS Codes 

A quantum code that attains the quantum Singleton bound is called a quantum Maximum 
Distance Separable code or quantum MDS code for short. These codes have received 
much attention, but many aspects have not yet been explored in the quantum case (but 
see [71, 126]). In this section we study the maximal length of MDS stabilizer codes. 

An interesting result concerning the purity of quantum MDS codes was derived by 
Rains [126, Theorem 2]: 

Lemma IV.21 (Rains). An [[n, k, d\]q quantumMDS code with k > lis pure up ton — d+2. 
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Corollary IV.22. All quantum MDS codes are pure. 

Proof. An [[n, k, d]]q quantum MDS code with /c = is pure by definition; if /c > 1 then 
it is pure up to n — d + 2. By the quantum Singleton bound n — 2d + 2 = k > 0; thus. 



Lemma IV.23. For any [[n,n — 2d+2,d\]q quantum MDS stabilizer code with n — 2d +2 > 
0, the corresponding classical codes C C C*-*-" are also MDS. 

Proof. If an [[n,n — 2d + 2,d]]g stabilizer code exists, then Theorem III. 15 implies the 
existence of an additive [n, d — l]q2 code C such that C C C-^". Corollary IV.22 shows that 
C"*-" has minimum distance d, so C"*-" is an [n, n — d+ 1, d]q2 MDS code. By Lemma IV.21, 
the minimum distance of C is > n — d + 2, so C is an [n, d — 1, n — d + 2]q2 MDS code. □ 

A classical [n, k, d]q MDS code is said to be trivial if /c < 1 or /c > n — 1. A trivial 
MDS code can have arbitrary length, but a nontrivial one cannot. The next lemma is a 
straightforward generalization from linear to additive MDS codes. 

Lemma IV.24. Assume that there exists a classical additive (n, q'', d)q MDS code C. 

(i) If the code is trivial, then it can have arbitrary length. 

( ii) If the code is nontrivial, then its code parameters must be in the range 2 < k < 
min{n — 2,q — 1} and n<q + k — l<2q — 2. 

Proof. The first statement is obvious. For (ii), we note that the weight distribution of the 
code C and its dual are related by the Mac Williams relations. The proof given in [107, 
p. 320-321] for linear codes applies without change, and one finds that the number of 

codewords of weight n — A; + 2 in C is given by 



n — d + 2 > d, which means that the code is pure. 



□ 




Since An-k+2 must be a nonnegative number, we obtain the claim. 



□ 
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We say that a quantum [[n, k, d]\q MDS code is trivial if and only if its minimum 
distance d < 2. The length of trivial quantum MDS codes is not bounded, but the length of 
nontrivial ones is, as the next lemma shows. 

Theorem IV.25 (Maximal Length of MDS Stabilizer Codes). A nontrivial [[n, k, d]\q MDS 
stabilizer code satisfies the following constraints: 

i) its length n is in the range 4 < n < + d — 2 < 2q^ — 2; 

ii) its minimum distance satisfies max{3, n — + 2} < d < min{n — 1, q^}. 

Proof. By definition, a quantum MDS code attains the Singleton bound, so n — 2d + 2 = 
k > 0; hence, n > 2d — 2. Therefore, a nontrivial quantum MDS code satisfies n > 
2d-2>4. 

By Lemma IV.23, the existence of an [[n, n — 2d + 2,d]]q stabilizer code implies 
the existence of classical MDS codes C and C-*-" with parameters [n,d — l,n — d + 2]q2 
and [n,n — d + l,d]q2, respectively. If the quantum code is a nontrivial MDS code, then 
the associated classical codes are nontrivial classical MDS codes. Indeed, for n > 4 the 
quantum Singleton bound implies 0? < {n + 2)/2 < (2n — 2)/2 = n — 1, so C is a nontrivial 
classical MDS code. 

By Lemma IV.24, the dimension of C satisfies the constraints 2 < d — 1 < min{n — 
2, — 1}, or equivalently 3 < d < min{n — 1, g^}. Similarly, the length n of C satisfies 
n < q'^ + {d—l) — l < 2(f- — 2. If we combine these inequalities then we get our claim. □ 

Example IV.26. The length of a nontrivial binary MDS stabilizer code cannot exceed 2(^ — 
2 = 6. In [35] the nontrivial MDS stabilizer codes for q = 2 were found to be [[5, 1, 3]]2 
and [[6, 0, 4]]2, so there cannot exist further nontrivial MDS stabilizer codes. 

In [71], the question of the maximal length of MDS codes was raised. All MDS 
stabilizer codes provided in that reference had a length of q^ or less; this prompted us 
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to look at the following famous conjecture for classical codes (cf. [76, Theorem 7.4.5] 
or [107, pages 327-328]). 

MDS Conjecture. If there is a nontrivial [n, k]q MDS code, then n < q + 1 except when 
q is even and k — Sork — q — lin which case n < q + 2. 

If the MDS conjecture is true (and much supporting evidence is known), then we can 
improve upon the result of Theorem IV. 25. 

Corollary TV.27. If the classical MDS conjecture holds, then there are no nontrivial MDS 
stabilizer codes of lengths exceeding q^ + 1 except when q is even and d — A or d — q^ in 
which case n <q^ + 2. 

D. Conclusions 

In this chapter we applied the theory developed in Chapter IE to derive classes of quantum 
codes. This work has also led to the construction of many more families of codes. The 
interested reader can find the details in [8]. Table II gives an overview and summarizes 
the main parameters of these families. We also illustrated the theory of puncture codes 
by deriving new codes from quantum BCH codes. One central theme in quantum error- 
correction is the construction of codes that have a large minimum distance. We were able 
to show that the length of an MDS stabilizer code over cannot exceed q^ except in a 
few sporadic cases, assuming that the classical MDS conjecture holds. An open problem is 
whether the length n of a g-ary quantum MDS code is bounded by + 1 for all but finitely 
many n. Another related problem is to construct analytically quantum MDS codes between 
lengths q and q^. Currently, constructions are known only for a few lengths in this range. 



Table n. A compilation of known families of quantum codes 



Family 


[[n,k,d]]q 


Purity 


Parameter Ranges and References 


Short MDS 


[[n,n-2d + 2,d]]q 


pure 


2<d<\n/2-\,q'-l>[l) 


Hermitian Hamming 


Wti Ti — 2ui 


pure 


m>2 Kcdfm -\) = 1 n= id^^ - I) Kd^ - 1) 


Euclidean Hamming 


\\n, n — 2m, Sll^ 
LL * * jjy 


pure 


m > 2, gcdfm, o — 1) = 1, n = (o'" — 1) liq — 1) 


Quadratic Residue I 


[fn, 1, d]]n 


pure 


n prime, n = 3 mod 4, g ^ mod n 
g is a quadratic residue modulo n, — d + 1 > n 


Quadratic Residue II 


ffn, 1, d\]n 
LL ' ' J jy 


pure 


n prime, n = 1 mod 4, g ^ mod n 
q is a quadratic residue modulo n, d> yjn 


Melas 


[[n,n- 4m, > 3]]^ 


pure 


q even, n = g^^" — l, Pure to 3 


Euclidean BCH 


[[n,n-2m\{6-l)il-l/q)],>6]]q 


pure 
to 6 


2 < (5 < gK/2| - 1 - (g - 2)[m odd] 
n = — 1 and m>2 


Punctured BCH 


[[d*{^i), > d*it,) - 2m\{5 - 1)(1 - l/q)\ , > 5]]q 


pure? 


5 < gL™/2l _ 1^ See Corollary 1V.20 


Hermitian BCH 


[[n,n-2m\iS-l){l-l/q')],>5]]q 


pure 


2<(5<g"*-l, n = _ i, Pure to 5 


Extended BCH 


[[n + l,n- 2m\{d - 1)(1 - -1,>S + l]]g 


pure 


Pure to + 1 


Trivial MDS 


[[n,n -2,2]]q 


pure 


n = mod p 




[[n, n, l]]q 


pure 


n > 1 


Character 


[[n,k{r2) - A;(ri),min{2™-^2^2^i+i}]]q 


pure 


n = 2™, 5 odd, < ri < r2 < m, A;(r) = YIj=o (7) 


CSS CRM 


[[q^,k{iy2) - k{ui),mm{dii^2),d{u^)}]]q 
< z/i < < rn{q - 1) - 1 


pure 


= Er=o(-l)^(7) rt-jr)^ u^ = m{q-l)~v-l 
+ l = {q-l)Q + R, d{u) = {R+ l)qQ 


Punctured GRM 


Mfi), > k{iy2) - k{vi) - (n - d{n)), > d]]q 


pure? 


d > mm{d{i^2),d{iy^)}, < /i < U2 - ui, [134] 


Hermitian GRM 




pure 


K^) = Er-o(-iy (7) rt'^'f)' = m{q^ - 1) - - 1 

u^ + l = {q^- 1)Q + R, d{v) = {R+ 




0<u< m{q - 1) - 1 




Punctured GRM 


[[d{f,^),>d{fi^)-2k{,,),>d{u^)]]q 


pure? 


{v+l)q<li< m{q^ - 1) - 1; [134] 


Punctured MDS 


[[q^ - qa, q^ - qa - 2v - 2,v + 2% 


pure 


Q<v<q-2,{}<a<q-u-l; [134] 


Euclidean MDS 


[[n,n-2d + 2,d]]q 


pure 


3 < n < g, 1 < d < n/2 + 1; [73] 


Hermitian MDS 


W-s,q'-s-2d + 2,d\]q 


pure 


1 < d < 9, s = 0, 1; [73] 


Twisted 


[[q' + l,q'-^,^q 


pure? 


[28] 


Extended Twisted 


[[g^g'■-r-2,3]], 


pure 


r > 2; [28] 




[[n,n - r - 2,3]]g 


pure 


n = (g^+2 - g3)/(g2 _ 1), r > 1, r odd; [28] 


Perfect 


[[n,n-r- 2,3]]q 


pure 


n = - l)/(g2 - 1), r > 2, r even; [28] 
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CHAPTER V 

SUBSYSTEM CODES - BEYOND STABILIZER CODES* 
In this chapter we study a recent generalization of quantum codes that unifies many ap- 
parently disparate notions of quantum error correction. This generalization called operator 
quantum error correction gathers within its framework both passive and active error correc- 
tion schemes, among them decoherence free subspaces (DFS), noiseless subsystems (NS), 
and standard quantum error-correcting codes (including stabilizer codes which formed the 
main theme of the last two chapters). Our main contribution in this chapter is to provide 
a natural construction of such codes in terms of Clifford codes, an elegant generalization 
of stabilizer codes due to Knill. Character-theoretic methods are used to derive a simple 
method to construct operator quantum error-correcting codes from any classical additive 
code over a finite field, which obviates the need for self-orthogonal codes. In view of 
its importance and also to better appreciate our contribution we shall spend a little time 
reviewing operator quantum error correction. The following review summarizes the key 
points of [99, 100] relevant for our discussion. A quick word about the nomenclature. 
These codes were originally studied in the context of operator algebras and hence, were 
named operator quantum error correcting codes. We shall often use the descriptive term 
subsystem codes in view of brevity. Both will be used interchangeably. 

Notation. If A?^ is a group, then Z{N) denotes the center of N. We denote by lrr{N) the set of 
irreducible characters of A^. If x and i) are characters of N, then (x, iP)n = \^\~^ YlneN x{p)'^{^~^) 
defines a scalar product on the vector space of class functions on N, and Irr(Ar) is an orthonor- 
mal basis of this space. We denote by supp(x) = {n ^ N\ x(n) ^ 0}. If x ^ lvv{N), then 
^{x) = {n ^ N \ x(l) = Ixl?^)!} denotes the quasikemel of x- Suppose that G is a group that 

*Part of the material in this chapter has been submitted to IEEE and currently under 
review. Copyright maybe transferred to IEEE. 
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contains iV as a subgroup. If ^ G Irr(G), then ^jv denotes the restriction of this character to N. 
If x,y G A'^, then [x,y] = x^^y^^xy is the commutator. If A and B are subgroups of a group, 
then [A, B] = ([a, 6] | a, G A and 6 G 5) is the commutator subgroup of A and B. In particular, 
N' = [AT, N] denotes the derived subgroup of N. The reader can find background material on finite 
groups in [13 1] and on character theory in [78]. As usual let be the system Hilbert space under 
consideration. Let BiH) denote bounded hnear operators on H. 

A. Review of Operator Quantum Error Correction 

The class of codes which we considered in the last two chapters come within the framework 
of a model often called the standard model. Mathematically, this model is defined as a triple 
{TZ, S,C), where S is the quantum channel, C a subspace of H and TZ a recovery operation. 
Additionally, we define a projector P onto the codespace C, thus C — PH. For any density 
operator p supported by C i.e. p in B{C) or equivalently p = PpP, the triple satisfies the 
following relation: 

{noS){p) = p for all p = PpP. (5.1) 

As we can see the standard model assumes a recovery operation TZ. In general TZ is 
nontrivial which in turn implies some form of active monitoring of the encoded quantum 
information in order to detect and correct the errors that occur. An alternative approach is 
to rely on passive error correction mechanisms, exemplified by decoherence free subspaces 
and noiseless subsystems. 

If we want to avoid performing active error correction, we are naturally led to the idea 
that the encoded states should not be affected by the channel. In other words, we must 
encode into Fix(£^), the fixed points of £ where 

Fix(£:) = {p e B{n) I E{p) = p}. 
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These fixed points can be nicely characterized for a certain class of quantum channels. 
Given a quantum channel £, we can write the channel in terms of its Kraus operators as 
follows 

£{p) = Y.^ipE\. (5.2) 

i 

Because of this decomposition we often write the channel £ — {Ei, Ej}. When the quan- 
tum channels satisfy the condition 

J^EiEl^I, (5.3) 

i 

we have a convenient way to characterize the fixed points. Channels satisfying equa- 
tion (5.3) are called unital channels. Let pEi = Eip for any E^. Then under the unital 
assumption all such p are fixed points of £ as 

£{p) = Yl^^P^i-PH^^^i-P- (5.4) 

i i 

We denote by A, the matrix polynomials generated by Ej} i.e., the algebra generated 
by {Ei, Ej}. This is called the interaction algebra in the literature. The noise communtant 
A' is defined as 

A' =\^pe B{H) \pE = Ep for any Ee{Ei,El}Y (5.5) 

From equation (5.4), it follows that A' C Fix{£). In fact, for unital channels it was shown 
that Fix(£^) = A'. Using results on C* algebras, Kribs et ah, showed that the interaction 
algebra has a representation of the form 

^ = Ik, ® BiHf) = Ik, ® Mr^ , (5.6) 

j 3 

where Mr^ is i?^ -dimensional matrix algebra (over C). This representation induces the 
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following structure on H 

n^@nf®nf, (s.v) 

3 

where dimTYj^ — Kj and dimHf — Rj. Since E (and A) act trivially on Hf, the subsys- 
tems Hf are called noiseless subsystems. To simplify matters we usually encode into only 
one subsystem, which gives us the following decomposition 

n = cec^ ^{n^®n'^)ec^, (5.8) 

where C-*- is the complement of C. Let dim Tt"^ — K and dim Ti,^ — R. Then dimC = KR 
and dimC"*- = dim?Y — KR. Let us denote operators in B{l-i'^) and B{l-i^) as and 
respectively. The (standard) noiseless subsystem given by C consists of operators in 
B{H'^ ® H^) that are of the form B{H^) ® Ir in other words (g) Ir. In this case 
the co-subsystem B is in the maximally mixed state. The codespace C is an algebra of 
operators. Decoherence free subspaces are noiseless subsystems with the dimension of the 
co-subsystem equal to one. In this case the codespace C is a subspace of T-t. 

One of the insights of [99] was that we can relax the constraint that the co-subsystem 
B should be in the maximally mixed state. This led to the idea of generalized noiseless 
subsystems. In this case the noiseless subsystem code is given by the operators in B{T-L) 
that are of the form (p^ ® p^). Comparing with equation (5.6) we can see that in this 
case we are not always encoding into the fixed points of 8. The codespace instead of 
being an algebra of operators is now a monoid^ of operators of the form p^ ® p^ . Given 
a decomposition ofU ^ ® ® and orthonormal bases {\ai)}'l^^, and 

^In [99], they refer to C as a semigroup even though C is equipped with identity. 
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for and 'H^ respectively, we define a projector onto C — (8) — PH as 

P = l^^^l^^l^^{J2\o^,){a,\)^{J2\(^j){Pj\). (5.9) 

i 3 

The action of P on p is defined as PpP. Then a generaUzed noiseless subsystem is defined 
as follows, see [99, Lemma 2]. 

Lemma V.l (Generalized noiseless subsystems [99]). Given a fixed decomposition ofH — 

® and a CPTP map S, define C = {p e B{n) | p = ® p^}. Then the 
following conditions are equivalent and define a generalized noiseless subsystem 7i^. 

i) S{p^ ® p^) ^ ® a^, for all p^ ® p^ eC and some a^. 

ii) E{p^ ® Ib) = p^ ® cr^, for all p^ ® Ib and some a^. 
Hi) {Tta oP o S) (p) = Tr a{p), for all p e C. 

Kribs et al, [99, 100] generalized these ideas further by incorporating active error 
correction also on the subsystem A. As in the standard model we now define a recovery 
operation TZ, that restores the subsystem B after the error. The definition is as follows. 

Lemma V.2 (Operator quantum error correcting codes [99]). Given a fixed decomposition 
ofH ^JCanda CPTP map S, define C = {p G B{rL) | p = p^ (g) p^}. Then 

the following conditions are equivalent and define an operator quantum error correcting 
code C with recovery operation TZ. 

i) TZ o S(p^ (g) p^) = p^ (g) a^, for all p^® p^ eC and some 

ii) TZoS{p^ ® Ib) = P^ ® cr^, for all p"^ ® Ib E C and some 
Hi) {Tta oPoTZoS) (p) = Tr^lp), for all p e C. 

We are often more interested in a simple condition that identifies correctable errors for 
a given channel E = {Ea, El} or equivalently, the detectable errors for a given subspace in 
H. Recall that if a code corrects the set of errors in E = {£■„}, it detects all the errors in 
the algebra = {^1^6 | E^, E^ G S}. 
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Theorem V.3 ( [99, 115]). Let H ^ ® ® K, and P ^ 1^ ® 1^ be a projector 
onto C — = PH. Then an error E is detectable by the operator quantum error 
correcting code C if and only if 

PEP =1"^® p% for some p| e B{n^). (5.10) 

Now that we have reviewed the salient ideas of operator quantum error correction, 
we will address a very important question - how do we systematically construct these 
codes? Two important contributions in this direction were the introduction of a stabilizer 
formalism and the notion of a gauge group by Poulin [120], and construction of a class 
of subsystem codes capable of encoding one qubit by Bacon [18]. However the bigger 
question of systematic construction of good subsystem codes still remained open. Our 
work addresses this problem in more detail. Subsequent to the publication of this work. 
Bacon and Cassacino independently proposed a class of subsystem codes [19]; these codes 
can be viewed as a special case of the codes constructed in this chapter. More details on 
these codes will be given in Chapter VI. 

Our approach is based on an elegant formalism to construct quantum error-correcting 
codes that has been introduced in 1996 by Knill as a generalization of the stabilizer code 
concept. At the heart of this quantum code construction is a famous theorem by Clifford 
concerning the restriction of irreducible representations of finite groups to normal sub- 
groups, so these codes were termed as "Clifford codes" in [88, 89], although "Knill codes" 
is perhaps a more appropriate name. Unexpectedly, it turned out that Clifford codes are in 
many cases stabilizer codes, so this construction did not become as widely known. 

In our approach, we construct a Clifford code C and give conditions that ensure that 
this code decomposes into a tensor product C = A® B. The Clifford codes allow us to 
control the dimensions of A and B, and we get a simple characterization of the detectable 
errors of the operator quantum error-correcting code. Since there may exist many different 
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ways to construct the same Clifford code C, we should note that these constructions can 
lead to different tensor product decompositions. In fact, even if one is just interested in the 
tensor decomposition of a stabilizer code C, then the Clifford codes can provide a natural 
way to induce an operator quantum error-correcting code on C. 

B. A Detour Through Clifford Codes 

As we have seen in the previous sections and in Chapter III, the study of quantum codes 
is related to the operators acting on the system Hilbert space. To simplify matters we can 
restrict our attention to a basis of these operators and the group generated by that basis, 
called the error group. In the binary case we deal with the familiar Pauli matrices and the 
group generated by them on n qubits. Knill generalized this concept by introducing the 
notion of nice error bases and abstract error groups which generalize the Pauli error group. 
We have already seen one application of this generalization in Chapter III, where we dealt 
with the generalization of the Pauli group to nonbinary alphabet. The benefit of the abstract 
approach is that it will free us from having to deal with cumbersome matrix operators but 
instead work with groups. The representations of the groups (in H) will bring us back 
to the concrete world of operators. In this chapter, we shall pursue this abstract approach 
permitting different error groups other than the Pauli error group. We say that a finite group 
E is an abstract error group if it has a faithful irreducible unitary representation p of degree 
d — \E : Z{E)\^/'^. The irreducibility of the representation ensures that one can express 
any error acting on as a linear combination of the matrices p{g), with g E E. The fact 
that the representation is faithful and has the largest possible degree ensures that the set of 
matrices {p{g) \g e T}, where T is a set of representatives of E/Z{E), forms a basis of 
the vector space of d x d matrices. 

A Clifford code is constructed with the help of a normal subgroup N of the error group 
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E and an irreducible character x of N. Let denote the irreducible character corresponding 
to the representation p of the group E, that is, (f){g) = Tr p{g) for g G E. Suppose that N is 
a normal subgroup of E and that x is an irreducible character of N such that (x, 0Ar)Ar > 0. 

Definition \A (Clifford codes). A Clifford code C corresponding to {E, p, N, x) is defined 
as the image of the orthogonal projector 



see [88, Theorem 1 ]. 

We emphasize that if we refer to a Clifford code with data {E, p, A^, x), then it is 
assumed that (x, ^at) > 0, as this condition ensures that dimC > 0. Recall that an error 

e in E is detectable by the (Clifford) quantum code C if and only if Pp{e)P = XgP holds 
for some Ag e C. 

The image of P is the homogeneous component that consists of the direct sum of all 

irreducible CA^-submodules with character x that are contained in the restriction of p to A^. 
The elements e in E that satisfy p{e)C — C form a group known as the inertia group 
Ie{x) — {9 ^ E\ x{gx9~^) — x{'^) for all X e N}. We note that C is an irreducible 
C[/e(x)] -module. Let d be the irreducible character corresponding to this module. 

Fact V.5. Let C be a Clifford code with data {E, p, N, x). Then the dimension of the code 

is given by dim C = \Z{E) r\N\\E : Z{E)\^>'^x{'^f An error e in E can be detected 
by C if and only ife is in E — (lEix) ~ ^i''^))- 

For a proof of this fact see [88] and for more background on Clifford codes see [89] 
and the seminal papers [92, 93]. 
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C. Constructing Operator Quantum Error-Correcting Codes 

We are now concerned with the construction of a decomposition of the Hilbert space Ti. in 
the form 

Put differently, we seek a decomposition of the Clifford code C as a tensor product A® B. 

The next theorem gives a construction of operator quantum error-correcting codes 
when one can express the inertia group Ie{x) a central product Ie{x) — ^^■> where L 
is a subgroup of E such that [L,N] = 1. 

Theorem V.6. Suppose that C is a Clifford code with data {E, p, N, x)- If the inertia group 
Ie{x) of the form Ie{x) = LN, where L is a subgroup of E such that [L,N] = 1, then 
C is an operator quantum error-correcting code C — A® B such that 

i) diuiA = \Z{E)nN\\E : Z{E)\^/\{1)/\N\, 

ii) dimB = x(l). 

The subsystem A is an irreducible CL-module with character xa £ Irr(L). An error e in E 
is detectable by subsystem A if and only ife is contained in the set E — {Ie{x) ~ Z{xa)N). 

Proof. Since the Clifford code C is an irreducible C[/e(x)] -module and Ie{x) — LN, with 
[L, N] = 1, there exists an irreducible CL-module A and an irreducible CA^-module B 
such that C ^ A^ B, see [57, Proposition 9.14]. If xa G Irr(L) is the character associated 
with the module A, xb e Irr(A'^) the character associated with B, and -& e Irr(7^(x)) the 
character associated with C, then -d is of the form ■&(in) = XA{£)XB{n) with i e L and 
ne N. 

As the restriction of C to a CA^-module contains an irreducible CA^-module W with 
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character x, we must have 

I I neN ' ' neN 

= Xa{1){xb,x)n > 0- 

Since Irr(iV) forms an orthonormal basis with respect to ( ■ , ■ ) at, we can conclude that the 
irreducible character xb must be equal to x- It follows that C = Ai^W. 

The dimension of 1^ = S is x(l)> and by Fact V.5 the dimension of C is given by 

TrP = \Z{E) n N\\E : Z{E)\^/^x{^f 

The dimension of B follows from the formula dim C = dim A dim B. 

Note that the projector for C acts as 1^^ = 1^ O 1^ on C. By [88, Theorem 1], 
an error e e E — Ie{x) maps C to an orthogonal complement, so eP and P project onto 
orthogonal subspaces and we have PeP = 0; by equation (5.10) the error e is detectable^ 
An error e in Z(xa)N acts by scalar multiplication on A and arbitrarily on B, so eP — 
1^ (g) for some e Thus PeP = 1^ ® again by equation (5.10) 

these errors are detectable (harmless would be a better word). Therefore, all errors in 
E — {Ie{x) ~ Z{xa)N) are detectable. Conversely, an error e in Ie{x) ~ Z{xa)N cannot 
be detectable, since e does not act by scalar multiplication on A. We have eP ^ \^ ® p^ . 
Therefore PeP ® p^ and thus e is an undetectable error. □ 

The data given in the previous theorem can be easily computed, especially with the 
help of a computer algebra system such as GAP or MAGMA. 

We will now consider some important special cases. Recall that most abstract error 
groups that are used in the literature satisfy the constraint E' C Z{E) (put differently, the 

^ Alternatively by Fact V.5, the error e is detectable when we view C as a Clifford code. 
When viewed as an operator quantum error correcting code, we encode only into a subspace 
of C, therefore e still remains detectable. 
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quotient group E/Z{E) is abelian). In that case, we are able to obtain a characterization of 
the resulting operator quantum error-correcting codes that does not depend on the choice 
of the character x- 

Theorem V.7. Suppose that E is an abstract error group such that E' C Z[E). Suppose 
that C is a Clifford code with data {E, p, N, x). In this case, the inertia group is given by 



= Ce{Z{N)). IfCE{Z{N)) = LNfor some subgroup L of E such that [L, N] = 1, 



An error e in E is detectable by subsystem A if and only if e is contained in the set E — 



Proof. Since the abstract error group E satisfies the condition E' C Z{E), the inertia group 
of the character x in £J can be fully determined; it is given by T :— Ie{x) — Ce{Z{N)), 
see [88, Lemma 5]. 
Suppose that 



is the orthogonal projector onto C. The assumption E' C Z{E) implies that there exists a 
linear character </? of h:x{Z{N)) such that 



satisfies Pi = P2, see [88, Theorem 6]. 

Let be the character of the representation p, that is, (j){g) = Tr p{g) for g E E. We 
have Tr Pi = x(l)V(l)|^ n Z(£;)|/|Ar| and TrPs = (t){l)\N ^^ Z{E)\/\Z{N)\. Since 
Pi = P2 project onto the codespace C, and dim C > 0, we have Tr Pi / Tr P2 = 1, which 
implies x(l)^ = Therefore, the claims i) and ii) follow from Theorem V.6. 



then C is an operator quantum error-correcting code C = A® B such that 



i) dim A = \Z{E) r\N\\E: Z{E)\ 

ii) dimB^\N : Z{N)\^/'^. 



/^\N : Z{N)\yy\N\, 



{Ce{Z{N)) - Z{L)N). 
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Let ■& e Irr(T) be the character associated with the CfT] -module C; put differently, 
■d is the unique character in Irr(T) that satisfies (t^at, x)n > ^ and (0t, ^)t > 0. Since 
Z{E) < T and {(pT, 'd)T > 0, it follows from Lemma V.18 that supp(i?) = Z{T). 

Since the inertia group T is a central product given by T = LN with [L,N] — 1, 
there exist characters xa G Irr(L) and xb = X ^ Irr(A^) such that '&{iri) — Xa(^)x(^) 
for £ e L and n e AT. By Lemma V.19, we have Z{T) = Z{L)Z{N); thus, supp(i?) = 
Z{L)Z{N). This implies that supp(xa) ^ L r\ Z{L)Z{N) = Z{L); hence Z{xa) = 
Z{L). The characterization of the detectable errors is obtained by substituting these facts 
in Theorem V.6. □ 

In the previous theorem, we still need to check whether Ce{Z{N)) decomposes into 
a central product of and some group L. In the case of extraspecial p-groups (which is 
arguably the most popular choice of abstract error groups) the decomposition of the inertia 
group into a central product is always guaranteed, as we will show next. 

Recall that a finite group E whose order is a power of a prime p is called extraspecial 
if its derived subgroup E' and its center Z{E) coincide and have order p. An extraspecial 
p-group is an abstract error group. The quotient group E = E/Z{E) is the direct product 
of two isomorphic elementary abelian p-groups. Therefore, one can regard as a vector 
space Fp" over the finite field Fp. 

Let C be a fixed generator of the cyclic group Z[E). As the commutator \x, y] depends 
only on the cosets x — xZ[E) and y — yZ{E), one can determine a well-defined function 
s: E X E ^¥phy [x,y] — (^^^'y\ The function s is a nondegenerate symplectic form. We 
note that two elements x and y in E commute if and only if s(x, y) = 0. We write a; J.^ ^ if 
and only if s{x,y) — 0. 

For a subgroup G of E, we will use G to denote G/Z{E). 

Lemma V.8. IfE is an extraspecial p- group and N a normal subgroup ofE, then Ce{Z{N)) — 
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NCe{N). 

Proof. Since Z{E) < NCe{N) < Ce{Z{N)), it suffices to show that the dimensions of 
the Fp-Unear vector spaces 

NCe(N) and Ce(Z(N)) 

are the same. Suppose that z — dim Z{N) and k — dim N. Then 

dimlm^N) = dim(]V + N^') = dimTV + dimTV^' - dim(]V n N^') 
= dim ¥ + dim N^" - dim(Z(iV)) 
= k + (2n — k) — z = 2n — z, 

which coincides with dim Ce{Z{N)) = dim Z{N) = 2n — z, and this proves our claim. 

□ 

The next theorem shows that it suffices to choose a normal subgroup N of the ex- 
traspecial p-group E, and this choice determines the parameters of an operator quantum 
error-correcting code provided by a Clifford code C. 

Theorem V.9. Suppose that E is an extraspecial p-group. IfC is a Clifford code with data 
{E, p, N, x), with N ^ 1, then C is an operator quantum error-correcting code C — A®B 
such that 

i) dimA= \Z{E) n N\\E : Z{E)\^/^\N : Z{N)\^/^/\N\, 

ii) dimB^\N : Z{N)\^/^. 

An error e in E is detectable by subsystem A if and only if e is contained in the set E — 
{NCe{N) - N). 

Proof The inertia group I^{E) = Ce{Z{N)), since E' C Z{E), see [88, Lemma 5]. 
By Lemma V.8, we have Ie{x) — — with L — Ce{N). Thus, C is an opera- 
tor quantum error-correcting code and the statements i) and ii) follow from Theorem V.7. 
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Furthermore, Theorem V.7 shows that an error e in £■ is detectable if and only if e e 

E - {NCe{N) - Z{L)N). Since is a p-group and N have TV n Z{E) ^ 1; 

hence Z{E) < N. We note that Z{L) C L n L^' = N^' nNCN; therefore, 
N C Z{L)N C Z{N)N = N, forcing Z(L)A^ = A^. □ 

The normal subgroup N used in the construction of subsystem codes will henceforth 
be called as the gauge group. This definition coincides with the definition of the gauge 
group in [120]. 

D. Subsystem Codes from Classical Codes 

We conclude this chapter by showing how the previous results can be related to classical 
coding theory. Let a and b be elements of the finite field of characteristic p. Recall that 
in Section 1 we defined the unitary operators X{a) and Z{b) on by 

X{a) \x) = \x + a), Z{h) \x) = uj''^^''^ \x) , 

where tr denotes the trace operation from the extension field to the prime field Fp, and 
(J — exp(27ri/p) is a primitive pth root of unity. Let a = (oi, . . . , a„) e F^. We write 
X(a) = X(ai) (g) • • • (8) X(an) and Z'(a) = Z{ai) (8) • • • Z{an) for the tensor products 
of n error operators. One readily checks that the group 

E = {X{a),Z{b)\a,be¥'^) 

is an extraspecial p- group of order pg^". As a representation p, we can take the identity 
map on E. We have E/Z{E) ^ F^". 

We need to introduce a notion of weights of errors. Recall that an error in E can be 
expressed in the form aX{a)Z{b) for some nonzero scalar a. The weight of aX{a)Z{b) 
is defined as |{i 1 1 < i < n, Oj 7^ or 6^ 0}|, that is, as the number of quantum systems 
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that are affected by the error. Similarly, we can introduce a weight on vectors of F^" by 

swt(a|6) — {i\l < i < n,ai or bi 0}\ 

for a,be F^. 

Theorem V.9 suggests the following approach to construct operator quantum error- 
correcting codes. 

Theorem V.IO. Let X be a classical additive subcode of W^"- such that X ^ {0} and let 
Y denote its subcode Y — X n X^\ Ifx = l-'^ | and y — \Y\, then there exists an operator 
quantum error-correcting code C — A® B such that 

i) dimA = q'^/{xyy/^, 

ii) diuiB = {x/yy/^ 

The minimum distance of subsystem A is given by d — swt {{X + X-^=) — X) — swt{Y-^^ — 
X). Thus, the subsystem A can detect all errors in E of weight less than d, and can correct 
all errors in E of weight < \_{d — l)/2\. 

Proof. Let E be the extraspecial p-group of order pg^"^, and let be the full preimage of 
N — X 'mE under the canonical quotient map. Therefore, we can apply Theorem V.9. The 

remainder of the proof justifies how the parameters given in Theorem V.9 can be expressed 
in terms of the code sizes x and y. 

Then Z{N) = XnX^' = Y. By definition, N contains hence, Z{E) < Z{N). 

It follows that \N : Z{N)\ = \N : Z{N)\ = x/y, so ii) follows from Theorem V9. For 
the claim i), we remark that x — \X\ = \N\/p, which implies that dim74 = {p/\N\)\E : 
Z(£;)|V2|Ar : Z(Ar)|V2 ^ qn(^^iyY/2i^_ 

The minimum distance of subsystem A is the weight of the smallest nondetectable 
error, so it is the minimum weight of an error in the set NCe{N) — N — Ce{Z{N)) — 
N. Since the quotient map E ^ E maps an error e of weight w onto a vector e such 
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that w — swt e, the claim about the minimum distance follows from the observations that 

NCe{N) -N ={X + X^^) - X and Ce{Z{N)) - N ^Y^^ -X. □ 

Remark V.ll. As in the case of stabilizer codes, the most general symplectic form we can 

choose is {u\v)s = tTq/p{a' ■ b — a ■ b'), where u = {a\b) and v = {a'\b') are in F^". We 
define the trace symplectic dual as C"*"" — {x & F^" | {x\y)s — 0, for ally e C}. In 
case of¥q-linear codes, the trace symplectic form {{a\b)\{a'\b'))s vanishes if and only if 
a' - b — a - b' vanishes. The trace symplectic dual for an ¥q-linear code therefore coincides 
with its symplectic dual. So when dealing with ¥g-linear codes we indulge in an abuse of 
notation and denote a' ■ b — a • b' also by {{a\b)\ {a'\b'))s and the duals with respect to both 
forms as C-^\ 

In the above the theorem we had been able to define the distance in terms of the 
classical codes. Having made choice of the error group we can also go back and recast the 
distance in terms of the gauge group as as wt(CB(Z(A/^)) — A?^). In addition, we can also 
extend the notion of purity to subsystem codes also in a straightforward manner. 

Definition V.12 (Pure and impure subsystem codes). Let N be the gauge group of a sub- 
system code Q with distance d — wt{CE{Z{N)) — N). We say that Q is pure to d' if there 
is no error of weight less than d' in N. The code is said to be exactly pure to d' ifwi{N) 
is d' and it is said to pure if d' > d . The code is said to be impure if it is exactly pure to 
d' < d 

This refinement to the notion of purity was made in recognition of certain subtleties 
that had to addressed when constructing other subsystem codes from existing subsystem 
codes, see [6] for details. 

An operator quantum error-correcting code with parameters ((n, K, R, d))q is a sub- 
space C — A ® B of dL ^"-dimensional Hilbert space H such that K — dim A, R — 
dim B, and the subsystem A has minimum distance d. The above theorem constructs 
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an {{n, q" / {xyY^^ , {x/yy^^,d))q operator quantum error-correcting code given a classi- 
cal (n, x)q code X and its (n, y)q subcode Y — X (1 X-^\ We write [[n, k, r, d]]q for an 
((n, g'', g*", (i))^ operator quantum error-correcting code. 

A further simplification of the above construction is possible which takes any pair of 
classical codes to give a subsystem code. 

Corollary V.13 (Euclidean Construction). Let Xi C F^, be [n, ki]q linear codes where 
i e {1, 2}. Then there exists an [[n, k, r, d]]q Clijford subsystem code with 

• k^n - {ki + k2 + k') 1% 

• T — {k\^ki — k')/2, and 

• d = min{wt((Xi^ n Xs)^ \ Xi), wt((X2^ n Xi)^ \ X2)}, 
where k' = dim^^(Xi n X^) x {X^ n X2). 

The result follows from Theorem V.9 by defining C — Xi x X2; it follows that 
C-L^ = X^ xX^andD^C n C-^^ = (Xi n X^) x {X2 n X^), and the parameters are 
easily obtained from these definitions, see [6] for a detailed proof. 

The notions of purity can be defined in terms of classical codes as well. Let C be an ad- 
ditive subcode of F^" and D ^Cn By theorem V.9, we can obtain an ((n, K, R, d))q 
subsystem code Q from C that has minimum distance d = swt{D-^'' If d' < swt(C), 

then we say that the associated operator quantum error correcting code is pure to d' . 

Extending the ideas of purity to subsystem codes is useful because it facilitates the 
analysis of the parameters of the subsystem codes, as will become clear when we derive 
bounds in the next chapter. 

As in the case of stabilizer codes we would like one would like to characterize the min- 
imum distance in terms of the familiar Hamming weight. For this purpose, we reformulate 
the above result in terms of codes of length n over F^2 . 

Let be a fixed normal basis of Fg2 over F^. We can define a bijection from 



103 



F^" onto F^2 by setting 

0((a|6)) = /3a + for {a\b) e ¥f. 

The map is chosen such that a vector (a|6) of symplectic weight x is mapped to a vector 
0((a|6)) of Hamming weight x. Recall the trace-alternating form {v\w)a for vectors v and 
w in F^2 given in equation (3.7) 

It is easy to show that (clc?)^ = {(j){c)\(j){d))a holds for all c, d e F^", see Lemma III. 14. 
Specifically, we have c±5 d if and only if 0(c) ±a 0(rf). Therefore, the previous theorem 
can be reformulated terms of codes of length n over F^2 as follows: 

Theorem V.14. Let X be a classical additive subcode of F^2 'iuch that X ^ {0} and let Y 

denote its subcode Y = X r\ X-*-". Ifx = \X\ and y = \Y\, then there exists an operator 
quantum error-correcting code C — A B such that 

i) dimA = gV(x?/)V2, 

ii) dimi? = (x/y)^/^. 

The minimum distance of subsystem A is given by 

d = wt{{X + X^^) -X)^ wt(r^'' - X), 

where wt denotes the Hamming weight. Thus, the subsystem A can detect all errors in 
E of Hamming weight less than d, and can correct all errors in E of Hamming weight 

L(ci- 1)/2J or less. 

Proof. This follows from Theorem V. 10 and the definition of the isometry 0. □ 

The above connections of Clifford operator quantum error-correcting codes to classi- 
cal codes allow one to explore a plethora of code constructions. Henceforth codes con- 
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structed by using Theorems V.10,V.14 will be referred to as Clifford subsystem codes 
or just subsystem codes. We shall give an example to illustrate the idea. For simplicity 
we shall consider binary codes derived from codes over F4 whose elements are given by 
{0,1,0;, o;^}, where lo'^ + lo + I — 0. Further, choosing (3 — u, the trace alternating product 
simplifies as {v\w)a = v • w"^ + v'^ • w. Note that if w — (wi, . . . , Wn), then we denote 



Example V.15. Let X be the additive code given by the following generator matrix. 



Gx = 



110 

11 

a; a; 



Then it can be verified that X-*-" is generated by 



Gx^a 



w 
u; a; 
10 10 
10 1 



Further, Y — X X-^" is generated by 



G, 



1111 



UJ UJ UJ UJ 



We see that \X\ — 2^, while \Y\ — 2^. Thus by Theorem V.14 we have a {{A, K, R,d))2 



Clifford subsystem code where K = 2^/ ^2^ ■ 2^ = 1 and R = ^/2y2^ = 2. The distance 
of the code is 2 because the F"*-" \ X contains (0, 1, 0, 1) among other weight two elements. 
Thus we obtain a ((4, 2, 2, 2))2 i.e. a [[4, 1, 1, 2]]2 code. This code is not a Clifford code. 
The associated Clifford code is a [[4, 2, 2]] 2 code. Incidentally, this code is the smallest 
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error detecting subsystem code with nontrivial dimensions for the subsystems. 

Often linear codes are of more interest than the additive codes. So we shall consider a 
linear operator quantum error-correcting code. In this case we can look at Hermitian duals 
instead of the trace- alternating duals. Let x,y e F^. Then we define the Hermitian inner 
product {x\y)h — Yl^ ^ivh Let C C F4 be an F4-linear code. The Hermitian dual of C is 
defined as C-^^ = {x G F4 | {x\c)h = for all c e C}. From Lemma ni.18, we know that 
C"*-" = C'^'^. So we can use Hermitian duals in Theorem V.14. 

Example V.16. Let X C F4'^ be a narrowsense BCH code of design distance 6. This code is 
neither self-orthogonal nor does it contain its (Hermitian) dual. The generator polynomial 
of X is given by 

g{x) = a;'^ + a;® + ujx'^ + a;^ + uj'^x + cu^. 
Thus X /5 an [15, 8, > 6] 4 code. A generator matrix for this code is obtained as 



G = 



1 


1 





cu 





1 


a;2 




























1 


1 





cu 





1 


co^ 




























1 


1 










1 






























1 


1 





cu 





1 




ou^ 


























1 


1 





U) 





1 


a;2 


a;2 


























1 


1 





UJ 





1 


a;2 




























1 


1 





cu 





1 






























1 


1 





cu 





1 







The gauge group is the (full) preimage ofG under the isometry cj). The generator polynomial 
of its Hermitian dual is given by 

X^ + x'^ + UJX^ -\- X^ -\- UJX^ + Up'X^ + UJX^ + IjJX + u. 
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The generator polynomial ofY — Cn C-^^ is given by 

h{x) ^x^ + ujx^ + + + ujx^ + uj'^x'^ + uj'^x + 1. 

We see that Y-^^ is a [15, 9] 4 code. Again using Theorem V.14 we can compute the dimen- 
sions of the subsystems A and B as 2^^/-\/4^ • 4^ = 2 and ^/WJ^ = 4 respectively. The 
code y-^^ has minimum weight 5 (computed using MAGMA). Since wt(X) > 6, it follows 
that wt(y-'-'' \ X) — h. Thus, X defines a ((15, 2, 4, 5))2 code. But note that the associated 
Clifford code has the parameters ((15, 8, 5))2. 

Further simplifications of Theorem V.14 for constructing operator quantum error- 
correcting codes can be found in [6]. The reader can also find examples of Clifford sub- 
sytem codes derived from BCH codes, Reed-Solomon codes therein. Interested readers can 
also refer to [19] for a novel method to construct subsystem codes from a pair of classical 
codes. 

E. Conclusions 

We have introduced a method for constructing operator quantum error-correcting codes. 
We have seen that a Clifford codes C offers naturally a tensor-product decomposition C — 
A® B, where the dimensions of the subsystems are controlled by the choice of the normal 
subgroup N and its character x- 

Our construction in terms of classical codes is fairly simple: Any classical (additive) 
code over a finite field can be used to construct an operator quantum error-correcting code. 
In particular, we do not require any self -orthogonality conditions as in the case of stabilizer 
code constructions. 

The most prominent open problem concerning operator quantum error-correcting codes 
is whether one can achieve better error correction that by means of a quantum error- 
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correcting code. The construction given in Theorem V.IO allows one to compare the pa- 
rameters of Clifford codes with the parameters of stabilizer codes. One should note that 
a fair comparison should be made between [[n — r,k,d]] stabilizer codes and [[n, /c, r, d]] 
Clifford subsystem codes. In subsequent chapters we shall establish bounds on the param- 
eters of subsystem codes and make a fair comparison of the subsystem codes and stabilizer 
codes. Additionally, we shall also look into other aspects which we have not considered 
here such as encoding subsystem codes, the gains in encoding and decoding. 

F. Appendix 

In this appendix, we prove some simple technical results on groups and characters. 

Lemma V.17. Let E be a finite group such that E' C Z{E), and let H be a subgroup of 
E. Ifx e Irr(i7) satisfies Z{E) n kerx = {1}, then suppx = Z{H). 

Proof. Let h E supp(x)- Seeking a contradiction, we assume that h E H — Z{H). Since 
E' C Z{E), there exists an element g E H such that ghg~^ — zh with z E Z{E) such that 
2; 7^ 1. Since zh E H and h E H,'we have z E H f] Z(E). As x is irreducible, the element 
z E H n Z{E) is represented by ul for some cu E Chy Schur's lemma; furthermore, 
ou ^ 1, since Z{E) n kerx = {!}• We note that x(/i) = x{9hg~^) — xi^h) — 0Jx{h), 
with uj ^1, forcing x{h) — 0, contradiction. 

The elements of Z{H) belong to the support of x, since they are represented by scalar 
invertible matrices. □ 

Lemma V.18. Let E be a finite group such that E' C Z{E), and let 4> G Irr(£^) be a 
faithful character of degree 0(1) = \E : Z{E)\^^^. Let T be a subgroup of E such that 

Z{E) < T. If^ E Irr(T) and {(Pt,'&)t > 0, then supp(i?) = Z{T). 

Proof Let Z = Z{E). We have supp(0) = Z by [78, Lemma 2.29]. Since the support of 
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(f) equals Z, it follows from the definitions that 



0< (0T,i?)r 



1 



T : Z 



Clearly, 0^ = 0(1)'/' and -dz — '&{'^)0 for some linear characters </? and 6 of Z. As 
^z)z = 0(l)''5(l)(v^) > 0, we must have 9 — ^p. Since is faithful, it follows that 
= ^ is faithful; hence, ker d n = {1}. Thus, supp d = Z(r) by Lemma V.17. □ 

Lemma V.19. Suppose that T is a group with subgroups L and N such that T = LN and 
[L, N] = 1. Then Z{T) = Z{L)Z{N). 

Proof. Since T — LN, an arbitrary element z of Z{T) can be expressed in the form z — In 
for some I e L and n e N. For n' in A^, we have Inn' — n'ln — In'n, where the 
latter equality follows from [L, A^] = 1. Consequently, nn' = n'n for all n' in A^, so n 
is an element of Z{N). Similarly, I must be an element of Z{L). It follows that Z{T) — 



Z{L)Z{N). 



□ 
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CHAPTER VI 

SUBSYSTEM CODES - BOUNDS AND CONSTRUCTIONS* 
In this chapter we extend the theory of subsystem codes. One of our goals is to clarify 
the benefits that can be gained from the use of subsystem codes with respect to stabilizer 
codes. In this context we derive bounds on the parameters of subsystem codes. These 
bounds help in comparing the performance of subsystem codes with respect to stabilizer 
codes. Of course subsystem codes subsume stabilizer and in that sense every stabilizer 
code is a subsystem code. However, we use the term subsystem code to mean a code with 
nontrivial dimension of the gauge subsystem. We generalize the quantum Singleton bound 
to Fg-linear subsystem codes. It follows that no subsystem code over a prime field can 
beat the quantum Singleton bound. On the other hand, we show the remarkable fact that 
there exist impure subsystem codes beating the quantum Hamming bound. A number of 
open problems concern the comparison in performance of stabilizer and subsystem codes. 
One of the open problems suggested by Poulin's work asks whether a subsystem code can 
use fewer syndrome measurements than an optimal F^-linear MDS stabilizer code while 
encoding the same number of qudits and having the same distance. We prove that linear 
subsystem codes cannot offer such an improvement under complete decoding. 

One of the promises of subsystem codes is their potential for simplifying error recov- 
ery. Perhaps the benefits of subsystem codes are best understood by an example. Consider 
the first quantum error correcting code proposed by [142], which encodes one qubit into 
nine qubits. This code which is capable of correcting a single error on any of the qubits 
requires the measurement of eight syndrome qubits. The Bacon-Shor subsystem code [18] 

*(c)2007. Part of the material in this chapter is reprinted from A. Klappenecker and P. 
K. Sarvepalli, "On subsystem codes beating the quantum Hamming or Singleton bound", 
Proc. Royal Society London A, vol 463, pp. 2887-2905, 2007. 
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on the other hand, also encodes one qubit into nine but it requires only four syndrome 
measurements, giving a simpler error recovery scheme. 

In this context it becomes crucial to identify when subsystem codes provide gains 
over the stabilizer codes. It also becomes necessary to compare the stabilizer codes and 
the subsystem codes fairly and with meaningful criteria. For instance, once again consider 
the [[9, 1,3]] 2 Shor code requiring n — A; = 9 — 1 = 8 syndrome measurements. The 
[[9, 1, 4, 3]] 2 Bacon-Shor code on the other hand requires n — k — r — 9 — 1 — A — A 
syndrome measurements. Clearly, this code is better than the Shor's code. But the optimal 
single error correcting binary quantum code that encodes one qubit is the [[5, 1, 3]] 2 code, 
which also requires only 5 — 1 = 4 syndrome measurements. So it is apparent that while a 
given subsystem code can be superior to some stabilizer codes, it is not at all obvious that 
it is better than the best stabilizer code for the same function, viz., encoding k qubits with a 
distance d. 

The first part of our chapter seeks to address this issue for F^-linear Clifford subsystem 
codes which might perhaps be the most useful class of subsystem codes. In this chapter we 
generalize the quantum Singleton bound to -linear Clifford subsystem codes. It follows 
that no Clifford subsystem code over a prime field can beat the quantum Singleton bound. 
We then show how the quantum Singleton bound can be applied to make the comparison 
between stabilizer and subsystem codes (focusing on stabilizer codes that are optimal in 
the sense that they meet the quantum Singleton bound). This bound makes it possible to 
quantify the gains that subsystem codes can provide in error recovery. In particular, our 
results show that these gains involve a trade off between the distance of the subsystem 
code and the number of information and the gauge qudits. We show that if there exists 
an Fq-linear MDS stabilizer code, i.e., a code meeting the quantum Singleton bound, then 
no Fg-linear subsystem code can outperform it in the sense of requiring fewer syndrome 
measurements for error correction. 
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Then we shift our attention to a class of subsystem codes on lattices. Bacon and Casac- 
cino [19] obtain a subsystem code from two classical codes. We show that this method is a 
special case of the Euclidean construction for subsystem codes proposed in [6] and give a 
coding theoretic analysis of these codes. 

Since the early works on quantum error-correcting codes, it has been suspected that 
impure codes should somehow perform better than the pure codes. However, it was shown 
that the quantum Singleton bound holds true for both pure and impure stabilizer codes. But 
it was not so clear with respect to the quantum Hamming bound. In fact, it was often con- 
jectured that there might exist impure quantum error-correcting codes beating the quantum 
Hamming bound, but a proof remained elusive. At least in the case of binary stabilizer 
codes there exists some evidence that the conjecture might not be true, as [12] showed 
that asymptotically the quantum Hamming bound was obeyed by impure codes as well, 
and [61] showed that no single error correcting binary stabilizer code can beat the quan- 
tum Hamming bound. In this context it is not surprising that questions were raised [18] if 
subsystem codes are any different. In [6] we proved the quantum Hamming bound for pure 
subsystem codes. We show here that impure subsystem codes can indeed beat the quantum 
Hamming bound for pure subsystem codes. For example, we demonstrate that the lattice 
subsystem codes can provide examples of impure subsystem codes that beat the quantum 
Hamming bound. 

The chapter is structured as follows. We assume that the reader is familiar with the 
notion of subsystem code introduced in the last chapter. We prove the quantum Singleton 
bound for subsystem codes in Section A. The lattice subsystem codes are focus of attention 
in Section C and Section D, wherein it is shown that there exist impure subsystem codes that 
beat the quantum Hamming bound. We conclude with a few open questions on subsystem 
codes. 
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A. Quantum Singleton Bound for F^-linear Subsystem Codes 

Recall that the quantum Singleton bound states that an [[n, A;, d]], quantum code satisfies 
2d < n — k + 2, [95, 126]. In this context it is natural to ask if subsystem codes also obey 
a similar relation. The usefulness of such a bound is obvious. Apart from establishing 
the bounds for optimal subsystem codes, they also make it possible to compare stabilizer 
and subsystem codes, as we shall see subsequently. We prove that the -linear subsystem 
codes with the parameters [[n, k, r, d]\q satisfy a quantum Singleton like bound viz., k + r < 
n — 2d + 2. It will be seen that this reduces to the quantum Singleton bound if r = 0. More 
interestingly, this reveals that there is a trade off in the size of subsystem A and the gauge 
subsystem. One pays a price for the gains in error recovery. The cost is the reduction in the 
information to be stored. 

Our proof for this result is quite straightforward, though the intermediate details are a 
little involved. First we show that a linear [[n, A;, r > 0, d]]q subsystem code that is exactly 
pure to 1 can be punctured to an [[n — l,k,r — l,d]]q code which retains the relationship 
between n, k, r.d. If d = 2 by repeated puncturing we either arrive at a pure code or 
a stabilizer code, both of which have upper bounds. For d > 2, two cases can arise, if 
the code is exactly pure to 1, we simply puncture it to get a smaller code as in d = 2 
case. Otherwise, we puncture it to get an [[n — 1, k,r + 1, d — l]]g code. By repeatedly 
shortening we either get a stabilizer code or a distance 2 code both of which have an upper 
bound. Keeping track of the change in the parameters will give us an upper bound on the 
parameters of the original code. 

Let w = (oi, 02, ... , a„|6i, 62, ... , 6„) e F^"-. We denote by p{w) e F^""^, the vector 
obtained by deleting the first and the n + 1*'* coordinates of w. Thus we have 

p{w) = (a2, . . . , an\b2, ...,bn)e Ff 
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Similarly, given a classical code C C F^" we denote the puncturing of a codeword or code 
in the first and n + 1 coordinates by p(C). 

In Theorem V.IO subsystem codes are constructed using a trace symplectic prod- 
uct. Following Remark V.ll for -linear codes instead of considering the trace sym- 
plectic inner product we can consider the relatively simpler symplectic product. Recall 
that the symplectic product of u — {a\h) and v — {a'\b') in F^" is defined as {u\v)s — 
{{a\h)\{a'\h')) s — a' ■ h — a ■ h' . The symplectic dual of a code C C F^" is defined as 
C"*-" = {x e Fg" I {x\y)s = 0, for all y G C}. As we shall be concerned with Fg-linear 
codes in this chapter, we will focus only on the symplectic inner product in the rest of the 
chapter. 

Lemma VI.l. Let C C F^" be an ¥g-linear code. Then C has an ¥g-linear basis of the 
form 

B = {^1, . . . , ^fc, ^fc+l) ^k+li Xk^2, ■ ■ ■ , ^k+rj ^k+r} 

where {xi\xj)s = = {zi\zj)s and {xi\zj)s — Sij. 

Proof. First we choose a basis B — {zi,. . . ,Zk, ^fc+i, ■ ■ ■ , Zk+r} for a maximal isotropic 
subspace Co of C. If Co 7^ C, then we can choose a codeword Xk+i in C that is orthog- 
onal to all of the Zi except one, say z^+i (renumbering if necessary). We can scale x^+i 
by an element in F^ so that {zk+i\xk+i)s — 1- If {Co,Xk+i) 7^ C, then we repeat the 
process by choosing another codeword x^^i that is orthogonal to all the previously chosen 
{xk+i, . . . , Xk+i-i} and all Zi except Zk+i, until we have a basis of the desired form. □ 

For the remainder of the section, we fix the following notation. By Theorem V.IO, we 
can associate with an F^ -linear [[n, k, r, d]]q subsystem code two classical F^ -linear codes 
C,DC F^'^ such that D = Cn \C\ = q^-''+\ \D\ = g""^"'' and swt{D^' \C)=d. 
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By lemma VI. 1, we can also assume that C is generated by 



Z\i ■ ■ ■ -I Zsi Zs-\-li Xs-\-li ■ ■ ■ -I 




where s — n—k—r and the vectors Xi, Zi inF^" satisfy the relations {xi\xj)s = = {zi\zj)s 
and {xi\zj)s = These relations on Xj, Zi imply that 



C 



Z\i • • • 1 Zg, ^s+r+l) -^s+r+l) • • • ) ^s+r+kj -^s+r+k) j 



D^cnc 



■±. 




D 



i-L. 




Lemma VI.2. An Wq-linear [[n, k,r > 0,d > 2]]q Clijford subsystem code exactly pure to 
1 can be punctured to an ¥q-linear [[n — 1, k,r — 1,> d\]q code. 

Proof. As mentioned above, we can associate to the subsystem code two classical codes 



a) Ifswt(£)) = 1, then without loss of generality we can assume that swt(zi) = 1. Further, 
zi can be taken to be of the form (1, 0, . . . , 0|a, 0, . . . , 0). And for i 7^ 1, because of ¥q- 
linearity of the codes we can pick all Xi,Zitohe oftheform (0, 02, . . . ,an|^'i,^'2, ■ ■ ■ ,&n)- 
Further, as Xj, Zi must satisfy the orthogonality relations with zi viz., {zi\zi)s = = 
{zi\xi)s, for i > 1 we can choose Xj, Zi to be of the form (0, 02, ... , a„|0, 62, • • • , K)- It 
follows that because of the form of Xi and Zi puncturing the first and n + coordinate 
will not alter these orthogonality relations, in particular \p{zi))s 7^ for s + 1 < 
i < n. 

Letting p{xi) — x\, p{zi) — z[ and observing that p{z]) — (0, . . . , 0|0, . . . , 0), we 
see that the code p{C) = (4, . . . , z^, z^+i, 4+1, . . . , x'^^^). Denoting by = 
p(C) n piC)^" it is immediate that is generated by {4, ■ ■ ■ while D-^^ = 
(4, 4+1, 4+1, ■ ■ ■ , 4, x'J. Hence p{C) defines an [[n-1, k, r, swt{D^^\p{C))]]q 



C,D C F^". Two cases arise depending on swt(D). 



115 



code. 

Next we show that swt(L'p " \ p{C)) > d. Let u = (02, . . . , a„|62, • • • , K) be in D^' \ 
p{C), then we can easily verify that (0, 02, ... , an|0, ^2, • • • , K) is orthogonal to all Zi, 
1 <i < s and hence it is in D-^^ . It cannot be in C as that would imply that u is in p{C) . 
But swt(Z^-^= \C) > d. Therefore swt{u) > d. and p{C) defines an [[n — 1, k, r, > d]]q 
code. By choosing C = {4, . . . , z'^, z'^^^, z'^^^, ^'s+r, ^'s+r) we can conclude 

that there exists an [[n— , k,r — 1, d]\q code. Alternatively, apply Theorem 16 in [6]. 
b) If swt(D) > 1, then we can assume that swt(2;s+i) = 1 and form the code C — 
{zi, . . . ,Zs, Zg+i, Zs+2, Xs+2, ■ ■ ■ , Zs+r, Xs+r)- It is clcar that C defines an [[n, k,r — 
1, d]\q code that is pure to 1 with swt(C" n C"-*-") = 1. But this is just the previous 
case, from which we can conclude that there exists an [[n — 1, A;, r — 1, > d]]q code. 

□ 

Lemma V1.2 allows us to establish a bound for distance 2 codes which can then be 
used to prove the bound for arbitrary distances. 

Lemma VI.3. An impure ¥q-linear [[n, k,r,d = 2]]q Clifford subsystem code satisfies 

k + r<n-2d + 2. 

Proof. Suppose that there exists an Fg-linear [[n, k,r,d — 2]]q impure subsystem code such 
that k + r > n — 2d + 2; in particular, this code must be pure to 1. By Lemma VI.2 it can 
be punctured to give an [[n — 1, fc, r — 1, > d]]2 subsystem code. If this code is pure, then 
k + r — 1 < n — l — 2d + 2 holds, contradicting our assumption k + r > n — 2d + 2; hence, 
the resulting code is once again impure and pure to 1. 

Now we repeatedly apply Lemma VI.2 to puncture the shortened codes until we get 
an [[n — r, k, 0, > d]]q subsystem code. But this is a stabilizer code which must obey the 
Singleton bound A; < n — r — 2d+2, contradicting our initial assumption /c+r > n — 2d+2. 
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Therefore, we can conclude that k-\-r<n — 2d-\-2. □ 

If the codes are of distance greater than 2, then we puncture the code until it either 
has distance 2 or it is a pure code. The following result tells us how the parameters of the 
subsystem codes vary on puncturing. 

Lemma VI.4. An impure ¥g-linear [[n, k,r,d > 3]]q Clifford subsystem code exactly pure 
to d' >2 implies the existence of an ¥q-linear [[n — 1, k,r + 1,> d — l]]q subsystem code. 

Proof Recall that the existence of an [[n, k,r,d > 3]]q subsystem code implies the exis- 
tence of F^-linear codes C and D such that 

C — {zi, ■ ■ ■ 1 Zg, Zg^i, Xg^i, . . . , Zg^fi -^s+r)) 

with s — n — k — r, and D — C f] see above. 

The stabilizer code defined by D satisfies k + r — n — s < n — 2d' + 2, or equivalently 
s > 2(i — 2; it follows that s > 2, since d' > 2. Without loss of generality, we can 
take zi to be of the form (1, 02, . . . , Onl^*!, ^'2 ■ ■ ■ , ^'n) for if no such codeword exists in D, 
then (0, 0, . . . , 0| 1, 0, . . . , 0) is contained in contradicting the fact that 8^1(0^") > 2. 
Consequently, we can choose Z2 in D to be of the form (0, C2, . . . , Cn|l, (i2, • • • , dn), and we 
may further assume that 61 = in 2^1. The form of zi and Z2 allows us to assume that any 
remaining generator of C is of the form (0, 1*2, • • • , Un\0, V2, • • • , fn)- 

Let p be the map defined by puncturing the first and (n + 1)*^ coordinate of a vector in 
C. Define for all i the punctured vectors x\ — p{xi) and = p{zi). Then one easily checks 
that {p{xi) I p{xj))s = = {p{zi) I p{zj))g for all indices i and j, and {p{xi) \ p{zj))g = 
if i > s + 1 or j > 3, and that {p{zi) \ p{z2))s = —1. 

Let us look at the punctured code p{C), 
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Since {p{zi) \ p{z2))s — —1 we have Dp — p{C) n p{C)^' — (2^3, . . . , z^), whence 
\Dp\ = \D\/q^. As swt(C) > 2, it follows that \p{C)\ = \C\. Thus p{C) defines an 
[[n — 1, A;, r + 1, swt(L'^'' \ p{C))]]q subsystem code. 

Recall that the code D is generated by s > 2 vectors; we will show next that our 
assumptions actually force s > 3. Indeed, if s = 2, then \D\ = and \D^''\ = 
Under the assumption swt(D-^'') > 2, it follows that = l^-^"! = But as 

p{D^') C F2"-2 this implies that p{D^') = F^'*-^. Since F^'*-^ has 2n - 2 independent 
codewords of symplectic weight one, D-^" must have 2n — 2 independent codewords of 
symplectic weight two. However, this contradicts our assumptions on the minimum dis- 
tance of the subsystem code: 

(a) If C is a proper subspace of D-^\ then the minimum distance d is given by d = 
swt \ C) > 3; thus, the weight 2 vectors must all be contained in C, which 
shows that \ C\ — g2n-2 — contradicting |C| < \D-^'\. 

(b) If C = D-^', then the minimum distance is given hy d — swt(Z^"'"^) = 2, contradicting 
our assumption that d > 3. 

Thus, from now on, we can assume that s > 3. 

Before bounding the minimum distance of the punctured subsystem code, we are go- 
ing to show that D^" = p{D-^''). Let w = (tii, ti2, . . . , Un\vi, ^2, ■ • ■ , Vn) be a vector in 
D-^\ For 3 < i < s, the vectors Zi are of the form (0, 02, ... , an|0, &2, ■ ■ ■ , &n); thus, 
it follows from {w\zi)s = that {p{w)\z[)s = 0. Hence p{w) is in D^", which implies 
p{D^') C We have \D^'\ = q^'^-'^/\Dp\ = q^''/\D\ = \D^^\, and we note that 

\D^^\ = \p{D^% because swt(D^^) > 2; hence, D^^ = p{D^'). 

Let w' = {u2, . . . , Un\v2, . . . , Vn) be an arbitrary vector in p{D^') \ p{C). It follows 
that there exist some a, (3 in Fg such that w = (a, ^2, . . . , Un\P, ^2, • • • , t^n) is in D-^"; it is 
clear that w cannot be in C, since then p{w) — w' would be in p(C); hence, swt(w) > d. It 
immediately follows that swt (Dp ''\p(C)) > d—1. Hence p{C) defines an [[n— 1, k, r+1, > 
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d — l]]g subsystem code. 



□ 



Now we are ready the prove the upper bound for an arbitrary subsystem code. Essen- 
tially we reduce it to a pure code or distance two code by repeated puncturing and bound 

the parameters by carefully tracing the changes. 

Theorem VI.5. An ¥q-linear [[n, k,r,d> 2]]^ Clifford subsystem code satisfies 



Proof. The bound holds for all pure codes, see [6]. So assume that the code is impure. If 

d = 2, then the relation holds by Lemma VLB; so let li > 3. If the code is exactly pure to 
1, then it can be punctured using Lemma VI. 2 to give an [[n — l,k,r — l,d' — d]\q code, 
otherwise it can be punctured using Lemma VI.4 to obtain an [[n — 1, A;, r + 1, d' > d — l]]q 
code. If the punctured code is pure, then it follows that either k + r — 1 <n—l — 2d + 2ox 
k-\-r + 1 <n — l — 2d' -\-2 <n — l — 2{d—l) + 2 holds; in both cases, these inequalities 
imply that A; + r < n - 2d + 2. 

If the resulting code is impure, then if it is exactly pure to 1 we puncture the code 
again using Lemma VI.2, if not we puncture using Lemma VI.4, until we get a pure code 
or a code with distance two. Assume that we punctured i times using Lemma VI.2 and j 
times using Lemma VI.4, then the resulting code is an [[n — i — j, k,r +j — i,d' > d — j]]q 
subsystem code. Since pure subsystem codes and distance 2 subsystem codes satisfy 



k + r<n-2d + 2. 



(6.1) 



k + r + j-i<n-i-j-2d' + 2<n-i-j-2{d-j) + 2, 



it follows that A; + r < n - 2c? + 2 holds. 



□ 



When the subsystem codes are over a prime alphabet, this bound holds for all codes 
over that alphabet. In the more general case where the code is not linear, numerical evidence 
indicates that it is unlikely that the additive subsystem codes have a different bound. We 
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have shown that a large class of impure codes already satisfy this bound. This prompts the 
following conjecture. 

Conjecture VI.6. Any [[n, k, r, d\]q Clifford subsystem code satisfies k + r<n — 2d + 2. 
B. Comparing Subsystem Codes with Stabilizer Codes 

In this section, we compare stabilizer codes with subsystem codes. We first need to es- 
tablish the criteria for the comparison, since subsystem codes cannot be universally better 
than stabilizer codes. For example, it is known that a subsystem code can be converted to 
a stabilizer code [100, 120]. See also Lemma 10 in [6] for a simple proof to convert an 
[[n, k, r, d]\q code to an [[n, k, d]\q code. This implies that no [[n, k, r, d\\q subsystem code 
can beat an optimal [[n, /c, d'\\q stabilizer code in terms of minimum distance, as d' > d. 
One of the attractive features of subsystem codes is a potential reduction of the number of 
syndrome measurements, and we use this criterion as the basis for our comparison. 

First, we must highlight a subtle point on the required number of syndrome bits for an 
Fg-linear [n, k, d]q code. A complete decoder, will require n — k syndrome bits. Complete 
decoders are also optimal decoders. A bounded distance decoder on the other hand can 
potentially decode with fewer syndrome bits. Bounded distance decoders typically decode 
up to [{d — 1)/2J. However, to the best of our knowledge, except for the lookup table 
decoding method, all bounded distance decoders also require n — k syndrome bits. As the 
complexity of decoding using a lookup table increases exponentially in n — /c it is highly 
impractical for long lengths. We therefore assume that for practical purposes, that we need 
n — k syndrome bits. 

Similarly, for an F^-linear [[n, fc, r, d]]q subsystem code, a complete decoder will re- 
quire n—Zc—r syndrome measurements, as is shown in E. We are not aware of any quantum 
code, stabilizer or subsystem, for which there exists a bounded distance decoder that uses 
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less than n — k — r syndrome measurements to perform bounded distance decoding. The 
work by Poulin [120] prompts the following question: Given an optimal [[k + 2d — 2, k, d]]q 
MDS stabilizer code, is it possible to find an [[n, k, r, d]\q subsystem code that uses fewer 
syndrome measurements? 

There exist numerous known examples of subsystem codes that improve upon nonop- 
timal stabilizer codes. The fact that the stabilizer code is assumed to be optimal makes this 
question interesting. The Singleton bound A; + r < n — 2d + 2 of an F^-linear [[n, k, r, d\\q 
subsystem code implies that the number n — k — r of syndrome measurements is bounded 
hy n — k — r > 2d — 2; thus, for fixed minimum distance d, there exists a trade off between 
the dimension k and the difference n — r between length and number of gauge qudits. 

Corollary VI.7. Under complete decoding an ¥q-linear [[n, k,r,d > 2]]q Clifford subsys- 
tem code cannot use fewer syndrome measurements than an ¥q-linear [[k + 2d — 2, k, d\]q 
stabilizer code. 

Proof. Seeking a contradiction, we assume that there exists an [[n, k, r, d]]q subsystem code 
that requires fewer syndrome measurements that the optimal [[k + 2d — 2,k,d]\q MDS 
stabilizer code. In other words, the number of syndrome measurement yield the inequality 
k + 2d — 2 — k >n — k — r, which is equivalent to A; + r > n — 2d + 2, but this contradicts 
the Singleton bound. □ 

Poulin [120] showed by exhaustive computer search that there does not exist an [[5, 1, r > 
0, 3]]2 subsystem code. The above result confirms his computer search and shows fur- 
ther that not even allowing longer lengths and more gauge qudits can help in reducing the 
number of syndrome measurements. In fact, we conjecture that corollary VI.7 holds for 
bounded distance decoders also. 

We wish to caution the reader that gains in error recovery cannot be quantified purely 
by the number of syndrome measurements. In practice, more complex measures such as 
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the simplicity of the decoding algorithm or the resulting threshold in fault-tolerant quantum 
computing are more relevant. The drawback is that the comparison of large classes of codes 
becomes unwieldy when such complex criteria are used. 

C. Subsystem Codes on a Lattice 

Bacon gave the first family of subsystem codes generalizing the ideas of Shor's [[9, 1, 3]] 2 
code [18]. Recently, he and Casaccino gave another construction which generalizes this 
further by considering a pair of classical codes [19]. We show that this method is a special 
case of Theorem V. 13. Since this construction is not limited to binary codes and our proofs 
remain essentially the same, we will immediately discuss a generalization to nonbinary 
alphabets. 

Theorem ¥1.8. For i e (1, 2}, let Ci C F^* be ¥q-linear codes with the parameters 
[rij, /cj, di\q. Then there exists a Clifford subsystem code with the parameters 

[[nin2,kik2, {rii - ki){n2 - A;2), niin{di, da}]]? 
that is pure to dp — vcn.n{d^, 0?^}, where df denotes the minimum distance ofC^. 

Proof. Let C be the classical linear code given by C = (F^^ ® C^) x {C^ (8) F^^-j xhen 
dimC = ni{n2 — /ca) + 'n2{ni — ki) and swt(C \ {0}) > min{d^, d^}. The symplectic 
dual of C is given by 

= (Ci®F^^) X (F^i^Cs). 
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We have dim C"*"" — kin2 + nik2. The code D — C C^' is given by 



D = ((F^i (8) C^) X {Ci ® F^^)) n ((Ci ® F^^) x (F^^ (g) C2)) 
= ((F^i ® ^2^) n (Ci ® F^^)) X {{Ci ® F^2) n (F^i ® C2)) 
= (Ci«)C2-^) X (Ci^(8)C2), 

anddimD = ki{n2—k2)+k2{ni—ki). It follows that dim C— dim D = 2{ni—ki){n2 — k2) 
and dimC"*-" — dimD = 2kik2. Using corollary V.13, we can get a subsystem code with 
the parameters 

[[nin2, kik2, {rii - ki){n2 -k2),d^ swt{D-^' \ C)]]q 

that is pure to dp — mm{di, d^}. It remains to show that d — min{di, ^2}- 
Since D = (Ci C^) x {C^ (g) C2), we have 

D^^ = {C^ ® Ca)^ X (Ci ® C2^)^ 

= ((Ci F^2) + (F^i (8) C2^)) X ((F^i (8) C2) + (Cj^ F^^)) . 

In the last equality, we used the fact that vectors ui (8) U2 and vi (g) V2 are orthogonal if and 
only if ui ± vi or 1*2 -L V2. 

For i e (1, 2}, let and Hi respectively denote the generator and parity check matrix 
of the code Cj. Without loss of generality, we may assume that these matrices are in 
standard form 



where Pf is the transpose of Pi. Let i7, 



and Gi 



/, 



hi 



-P! h 



Using these notations, the generator 
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matrices of C and D " can be written as 



Gc 



Ho 



'n2 



and Gd±s 



Gi^H: 








ni ^ -'-'2 









Hi 



'n2 



It follows that the minimum distance d is given by 

/ 

swt{D-^' \C) = min { wt 



Gi®H 



\ 
( 



wt 



if9 



^1 



\ H, 




Let us compute 



wt 



HI ® G2 



\ 



Hi 



'712 



\ i^l 



'n2 



If minimum weight codeword is present in D-^" \ C, it must be expressed as linear combi- 
nation of at least one row from [Hf ® G2] otherwise the codeword is entirely in C. Recall 



Hi 




-ki 


Pi] 


and HI = 


[0 


4i ]. Letting Pi = 


ipij), we can write 











... 





G2 













... 





G2 





HI 


®G2 







... 








G2 


Hi 








... 





Pllln2 


Plkjn2 











/jj2 . . . 




P2Jn2 


P2kiln2 











... 


^n2 


P{n\—ki)lln2 ■ ■ ■ 


P{ni—ki)ki-^n2 
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Now observe that any row below the line in the above matrix can has a weight of only one 
in each of the last ki blocks of size 712. And any linear combination of them involving less 
than d2 and at least one generator from the rows above must have a weight > d2. If on the 
other hand there are more than ^2 rows involved, then the first ^2(711 — ki) columns will 
have a weight > 0^2 . Thus in either case the weight of an element that involves a generator 
from [H^ (g) G2] must have a weight > d2. On the other hand, the minimum weight of the 
span of [H^ (8) 6*2] is wt(C2) = d2, from which we can conclude that 



1. Bacon-Shor Codes 

Bacon [18] proposed one of the first families of subsystem codes based on square lattices. 
A trivial modification using rectangular lattices instead of square ones gives the following 

codes, see also [19]. The relevance of these codes will be seen later in Section D. Using 
the same notation as in Theorem VI.8, let Gi — [1, . . . , l]ixi and Hi be the matrix defined 




Because of the symmetry in the code we can argue that 




and consequently d — minjcii, ^2}, which proves the theorem. 



□ 
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as 



1 1 



1 1 



1 1 



1 1 



i— Ixi 



and C, the additive code generated by the following matrix. 



Observe that Gi generates an [i, 1, i]g code with distance i. By Theorem VI. 8, and Gn^ 
will give us the following family of codes 

Corollary VI.9. There exist [[nin2, 1, (rii — l)(n2 — 1), min{ni, ^12}]]^ Clifford subsystem 
codes. 

D. Subsystem Codes and Packing 

We investigate whether subsystem codes lead to better codes because of the decomposition 
of the code space. Since the early days of quantum codes, it has recognized that the degen- 
eracy of quantum codes could lead to a more efficient quantum code and allow for a much 
more compact packing of the subspaces in the Hilbert space. But so far it has not been 
shown for stabilizer codes. We can derive similar bound for subsystem codes. [6] showed 
the following theorem for pure subsystem codes. 

Theorem VI.10. A pure {{n, K, R, d))q Clifford subsystem code satisfies 




j=0 



(6.2) 



126 



It is natural to ask if impure subsystem codes also satisfy this bound. We show that 
they do not by giving an explicit counterexample. This counter example comes from the 
codes proposed by [18]. Recall the Bacon-Shor codes are [[n^, 1, (n — 1)^, n]]2 subsystem 
codes. The [[9, 1, 4, 3]] 2 is an interesting code. We can check that it satisfies the Singleton 
bound for subsystem codes as 



So it is an optimal code. More interestingly, substituting the parameters of the [[9, 1, 4, 3]]2 
Bacon-Shor code in the above inequality we get 



Therefore the [[9, 1, 4, 3]] 2 Bacon-Shor code beats the quantum Hamming bound for the 
pure subsystem codes proving the following result. 

Theorem VI.ll. There exist impure {{n, K, R, d))q Clifford subsystem codes that do not 
satisfy 



An obvious question is why impure codes can potentially pack more efficiently than 
the pure codes. Let us understand this by looking at the [[9, 1, 4, 3]]2 code a little more 
closely. This code encodes information into a subspace, Q where dimQ = 2^+'' = 2^. 
As it is a subsystem code Q can be decomposed as Q — A 1^ B, with dim A = 2^^ — 2 
and dim B — 2^ — 2^. In a pure single error correcting code all single errors must take 
the code space into orthogonal subspaces. In an impure code this is not required two or 
more distinct errors can take the code space to the same orthogonal space. In the Bacon- 
Shor code a phase flip error on any of the first three qubits will take the code space to 
same orthogonal subspace and because of this we cannot distinguish between these errors. 



A; + r = l + 4 = n-2d+2 = 9- 6 + 2. 




3^ = 28 > 2' 



,9-5 




3=0 
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However, it is not a problem because we can restore the code space with respect to A even 
though we cannot restore B. Thus instead of requiring 9 orthogonal subspaces as in a pure 
code, we only require 3 orthogonal subspaces to correct for any single phase flip error. 
Considering the bit flip errors and the combinations we need only 9 orthogonal subspaces. 
Thus with the original code space this means we need to pack ten 2^-dimensional subspaces 
in the 2" = 2^ dimensional ambient space, which is achievable as 10 • 2^ < 2^. 

More generally, in a sense degeneracy allows distinct errors to share the same orthog- 
onal subspace and thus pack more efficiently. It must be pointed out though that this better 
packing is attained at the cost of r gauge qudits compared to a stabilizer code. 

In fact there exists another code among the Bacon-Shor codes which also beats the 
Hamming bound for the subsystem codes. This is the [[25, 1, 16, 5]]2 code. The family of 
codes given in corollary VI.9 provides us with [[12, 1, 6, 3]]2, yet another example of a code 
that beats the quantum Hamming bound like the [[9, 1, 4, 3]] 2 code. We can check that 



But note that unlike [[9, 1, 4, 3]] 2 this code does not meet the Singleton bound for pure 
subsystem codes as 6 + 1 < 12 — 6 + 2. Naturally we can ask if there is a systematic 
method to construct codes that beat the quantum Hamming bound. Ashikhmin and Litsyn 
showed that all binary stabilizer codes - pure or impure - of sufficiently large length obey 
the quantum Hamming bound, ruling out the possibility that impure codes of large length 
can outperform pure codes with respect to sphere packing. In contrast we show that impure 
subsystem codes do not obey the quantum Hamming bound for pure subsystem codes, 
not even asymptotically. We show that there exist arbitrarily long Bacon-Shor codes that 
violate the quantum Hamming bound. 

Degenerate quantum error-correcting codes pose many interesting questions in the 




3^ = 37 > 2 



,12-1-6 



32. 
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theory of quantum error-correction. The early discovery of the phenomenon of degeneracy 
raised the question whether degenerate quantum codes can perform better than nondegen- 
erate quantum codes. One of the unresolved questions to this day in the theory of stabilizer 
codes is whether the bounds that hold for nondegenerate codes also hold for degenerate 
codes. Some bounds like the quantum Singleton bound do. But for others, like quantum 
Hamming bound, an answer remains elusive. Partial answers were provided by Gottes- 
man [61] for single error-correcting and double error-correcting codes. Ashikhmin and 
Litsyn [12] showed that asymptotically degenerate codes cannot beat the quantum Ham- 
ming bound. This leaves only a small range of degenerate binary stabilizer codes of mod- 
erate length that can potentially beat the quantum Hamming bound, but we conjecture that 
no such examples can be found. 

We show that the situation is markedly different in the case of subsystem codes (also 
known as operator quantum error-correcting codes [94, 99, 100]). The quantum Hamming 
for pure subsystem codes was derived in [6]. We have already shown that there exist impure 
subsystem codes that beat the quantum Hamming bound for pure subsystem codes. Now 
we address the question whether impure subsystem codes asymptotically obey the quantum 
Hamming bound, as in the case of binary stabilizer codes. We show that there exist impure 
subsystem codes of arbitrarily large length that beat the quantum Hamming (or sphere- 
packing) bound. 

For the binary cases the quantum Hamming bound for subsystem codes states that a 
pure [[n, k, r, d]] subsystem code satisfies 



We claim that all the Bacon-Shor codes [18,19] of odd lengths /.e., [[(2t+iy, l,At'^,2t+l]\ 




(6.3) 
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violate the quantum Hamming bound, namely that 



j=0 

holds for all positive integers t. It suffices to show that 



2^* < (^^^+^^'^]3* (6.4) 



t 

holds for all positive integers t. Since < 4(i - 1/6)^ + 8/9 = - At/3 + 1, we have 

16t 2 

— < 4r + 1 + 4i 

o 

for alH > 0. Multiplying both sides by 3/t and raising to the i*'* power yields 

, 3^(2t + ir 

which proves the inequality (6.4), as (^) > Thus, we can conclude that the Bacon- 

Shor codes of odd length do not obey the quantum Hamming bound. 

Theorem VI.12. Asymptotically, the quantum Hamming bound (6.3) does not hold for 
impure subsystem codes. 

It is remarkable that there exist such families of subsystem codes that can pack more 
densely than any pure subsystem code. Further examples of such densely packing sub- 
system codes can be found among the family with parameters [[nin2, 1, {rii — l)(n2 — 
1), min{ni, n2}]], which contains for instance a [[12, 1, 6, 3]] subsystem code. 

E. Conclusions 

We have proved that any F^-linear [[n, k, r, d]]q Clifford subsystem code obeys the Single- 
ton bound k + r < n — 2d + 2. Furthermore, we have shown earlier that pure Clifford 
subsystem codes satisfy this bound as well. Our results provide much evidence for the 
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conjecture that the Singleton bound holds for arbitrary subsystem codes. Proving this for 
all additive subsystem codes will be an interesting problem. 

Pure Clifford subsystem codes obey the Hamming (or sphere packing) bound. In 
this chapter, we have shown the amazing fact that there exist impure Clifford subsystem 
codes beating the Hamming bound. This is the first illustration of a case when impure 
codes pack more efficiently than their pure counterparts. One example of a code beating 
the Hamming bound is provided by the [[9, 1,4, 3]]2 Bacon-Shor code; this remarkable 
example also illustrates the following noteworthy facts: 

a) The [[9, 1, 4, 3]] 2 code requires 9 — 1 — 4 = 4 syndrome measurements just like the 
perfect [[5, 1, 3]] 2 code. 

b) Since k -\- r < n — 2c? + 2 for all prime alphabet codes, [[9, 1, 4, 3]] 2 code is also an 
optimal subsystem code. This is interesting because the underlying classical codes are 
not MDS. In MDS stabilizer codes, the underlying classical codes are required to be 
MDS codes. 

c) The Bacon-Shor code is also impure. So unlike MDS stabilizer codes which must be 
pure, MDS subsystem codes can be impure. 

d) The maximal length of a g-ary stabilizer MDS code is 2g^ — 2, see Theorem IV.25 
whereas for subsystem codes it is larger as the [[9, 1, 4, 3]] 2 code indicates. 

The implication of b)-d) is that optimal subsystem codes can be derived from suboptimal 
classical codes, unlike stabilizer codes. It would be an interesting problem to determine 
what are the conditions under which a non-MDS classical code will lead to an MDS sub- 
system code. 
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CHAPTER VII 

ENCODING AND DECODING OF SUBSYSTEM CODES 
A. Introduction 

In this chapter we investigate encoding and to some extent decoding of subsystem codes. 
Our main result is that encoding of a subsystem code can be reduced to the encoding of 
a related stabilizer code, thereby making use of the previous theory on encoding stabilizer 
codes [42,61,73]. We shall prove this in two steps. First, we shall show that Clifford codes 
can be encoded using the same methods used for stabilizer codes. Secondly, we shall show 
how these methods can be adapted to encode Clifford subsystem codes. Since subsys- 
tem codes subsume stabilizer codes, noiseless subsystems and decoherence free subspaces, 
these results imply that we can essentially use the same methods to encode all these codes. 
In fact, while the exact details were not provided it was suggested in [121] that encoding 
of subsystem codes can be achieved by Clifford unitaries. Our treatment is comprehensive 
and gives proofs for all the claims. 

Subsystem codes can potentially lead to simpler error recovery schemes. In a similar 
vein, they can also simplify the encoding process, though perhaps not as dramatically*. 
These simplifications have not been investigated thoroughly, neither have the gains in en- 
coding been fully characterized. Essentially, these gains are in two forms. In the encoded 
state there need not exist a one to one correspondence between the gauge qubits and the 
physical qubits. However, prior to encoding such a correspondence exists. We can exploit 
this identification between the virtual qubits and the physical qubits before encoding to 
tolerate errors on the gauge qubits, a fact which was recognized in [121]. Alternatively, 

*In general, decoding is usually of greater complexity than encoding and for this reason 
it is often neglected in comparison. This parallels the classical case where also the decoding 
is studied much more extensively than encoding. 
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we can optimize the encoding circuits by eliminating certain encoding operations. The en- 
coding operations that are saved correspond to the encoded operators on the gauge qubits. 
This is a slightly subtle point and will be elaborated at length subsequently. We argue that 
optimizing the encoding circuit for the latter is much more beneficial than simply allowing 
for random initialization of gauge qubits. 

Notation. The inner product of two characters of a group N, say x and 9, is defined 
as (x, 6')jv = 1/1 A^l Zlnejv x{n)0{n~^). We shall denote the center of a group N by Z{N). 
Given a subgroup N < E,v^q shall denote the centralizer of A'^ in £^ by Ce{N). Given a 
matrix A, we consider another matrix B obtained from A by column permutation tt as being 
equivalent and denote this by B =^ A. Often we shall represent the basis of a group by the 
rows of a matrix. In this case we will regard another basis obtained by any row operations 
or permutations as being equivalent and by a slight abuse of notation continue to denote 
B A. The commutator of two operators A, B is defined as [A, B] — AB—BA. This can 
potentially conflict with our definition of commutator in Chapter V as [x, y] = xyx~^y~^. 
However, in this chapter we will not have occasion to use this definition. 



B. Encoding Stabilizer Codes - A Review 
Recall the Pauli matrix operators^ 





1 




1 




-1 


X = 


1 


, z = 


-1 


, Y = 


1 



Let Vn be the Pauli group on n qubits. An element element e = {—iyx°'^Z^^ (8) • • • <8) 
X'^nzbn in can be mapped to F|" by r : ^ F|" as 

T(e) = (oi, . . . , a„|6i, . . . , (7.2) 



^We consider the real version of the Pauli group in this chapter. 
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Given an [[n, k, d]\2 code with stabilizer S, we can associate to S (and therefore the 
code), a matrix in F2 obtained by taking the image of any set of its generators under 

the mapping r. We shall refer to this matrix as the stabilizer matrix. We shall refer to 
the stabilizer as well as any set of generators as the stabilizer. Additionally, because of 
the mapping r, we shall refer to the stabilizer matrix or any matrix obtained from it by 
row reduction or column permutations also as the stabilizer. The stabilizer matrix can be 
put in the so-called "standard form", see [42,61]. This form also allows us to compute 
the encoded operators for the stabilizer code. Recall that the encoded operators allow us 
to perform computations on the encoded data without having to decode the data and then 
compute. 

Definition VII.l (Encoded operators). Given a [[n, k, d]\2 stabilizer code with stabilizer S, 
let Xi, Zifor 1 < i < k be a set of 2k linearly independent operators in C-p^ (S) \ SZ{Vn)- 
The operators X^, Zi are said to be encoded operators for the code if they satisfy the 
following requirements. 

i) [Xi,Xj]^0 

ii) [Zi, Zj] = 

[Xi, Zj] — 2SijXiZi 

The operators X^ and Zj are referred to as encoded or logical X and Z operators 
on the ith and jth logical qubits, respectively. The choice of which of the 2k linearly 
independent elements of Cp„(S') \ SZ{Vn) we choose to call encoded X operators and Z 
operators is arbitrary; as long as the generators satisfy the conditions above, any choice 
is valid. Different choices lead to different sets of encoded logical states; alternatively, a 
different orthonormal basis for the codespace. 

Lemma VII.2 (Standard form of stabilizer matrix [42, 61]). Up to a permutation n, the 
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stabilizer matrix of an [[n, k, d\]2 code can be put in the following form, 



S 7, 



Is' M A2 





S c 

D In-k-s' E 



(7.3) 



while the associated encoded operators can be derived as 



z 


















h 


X 


7r 







h 


c* 









(7.4) 



Remark VII.3. Encoding using essentially same ideas is possible even if the identity ma- 
trices Is' in the stabilizer matrix or Ik in the encoded operators are replaced by upper 
triangular matrices. 

The standard form of the stabilizer matrix prompts us to distinguish between two types 

of the generators for the stabilizer as they affect the encoding in different ways (although it 
can be shown that they are of equivalent complexity). 

Definition VII.4 (Primary generators). A generator Gi = (ai, . . . , a„|6i, . . . , 6„) with at 
least one nonzero ai is called a primary generator. 

In other words, primary generators contain at least one X oxY operator on some qubit. 
The primary generators determine to a large extent the complexity of the encoding circuit 
along with the encoded X operators. The operators X are also called seed generators and 
they also figure in the encoding circuit. The encoded Z operators do not. 

Definition VII.5 (Secondary generators). A generator of the form (0, . . . , 0|6i, . . . , 6„) is 
called secondary generator. 

In the standard form encoding, the complexity of the encoded X operators is de- 
termined by the secondary generators. Therefore they indirectly contribute* to the com- 



^Indirect because the submatrix E, figures in both the secondary generators, see equa- 
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plexity of encoding. We mentioned earlier that different choices of the encoded operators 
amounts to choosing different orthonormal basis for the codespace. However, the choice in 
Lemma VII.2 is particularly suitable for encoding. We can represent our input in the form 
|0) \ai. . . ak) which allows us to make the identification that |0) is mapped to |0), 
the logical all zero code word. This state is precisely the state stabilized by the stabilizer 
generators and logical Z operators, (which in Lemma VII.2 can be seen to be consisting 
of only Z operators). Given the stabilizer matrix in the standard form and the encoded 
operators as in Lemma VII.2, the encoding circuit is given as follows. 

Lemma VII.6 (Standard form encoding stabilizer codes [42, 61]). Let S be the stabilizer 
matrix of an [[n, k, d]] stabilizer code in the standard form i.e., as in equation (7.3). Let 
Gi denote the ith primary generator of S and Xj denote the jth encoded X operator as in 
equation (7.4). Then these operators are in theform^ 

Gi — (0, 0, ... , 1, Cj+i, . . . , a„|6i, . . . , 6s', 0, . . . , 0, . . . , 

Xj = (0, . . . , 0, Cs'+i, . . . , Cn_feO, . . . , 0, 1 = Cn-k+j: 0, . . . , 0|cii, . . . , dg', 0, . . . , 0). 

To encode the stabilizer code we implement the following circuits corresponding to each of 
the primary generators and the encoded operators. The generator Gi is implemented after 
Gj+i. The encoded operators precede the primary generators in their implementation but 

tion (7.3), and also the encoded X operators, see equation (7.4). 

§We allow some freedom in the primary generators, in that instead of Ig' in equa- 
tion (7.3), we allow it be an upper triangular matrix also. 
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we can implement Xj before or after Xj^i. 

|0)i 



|0>. 
|0).+i 



- H 










r 















bn.— k.4-i 





X^^ri Z^ri 









To encode a stabilizer code, we first put the stabilizer matrix in the standard form, 
then implement the seed generators i.e., the encoded X operators, followed by the primary 
generators i = s' to i = 1 as per Lemma VII.6. The complexity of encoding the ith primary 
generator is at most n — i two qubit gates and one H gate. The complexity of encoding an 
encoded operator is at most n — k — s' CNOT gates. This means the complexity of standard 
form encoding is upper bounded hy {2n — 1 — k — s')s' /2 two qubit gates and s' Hadamard 
gates; 0{n{n — k)) gates. A minor modification ( [66]) must be incorporated when Y is 
defined as F = [ ° ] as the following example illustrates. See [67] for more examples. 
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Example VII.7. Consider the [[5, 1, 3]] code with following stabilizer, with Y — ['^ 

X I X X X 

I X Z X Y 

S = 

Z I z z z 

I Z Y Z X 



The associated stabilizer matrix is given by 



S = 



1 





1 





1 




















1 



Writing S in standard form we get 



S = 
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The encoded operators for this code are 

Z 
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1 1 



110 1 
1110 



In addition to following the procedure described in Lemma VII.6, one must throw in a P 
gate, for every Y on the diagonal of the stabilizer (in standard form). The encoding circuit 
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is given by 



|0) 
|0) 
|0) 
|0) 



H 



H 



H 



X 



-t- 



X 



■Y_ 



X 
■Y_ 

g7 



X 



C. Encoding Clifford Codes 

In this section, we show that a Clifford code can be encoded using its stabilizer and there- 
fore the methods used for encoding stabilizer codes are applicable. So that this chapter 
can be read independently of Chapter V, we briefly recapitulate some facts about Clifford 
subsystem codes. Let E be an abstract error group i.e., it is a finite group with a faithful 
irreducible unitary representation p of degree \E : Z{E)\^/'^. Denote by 0, the irreducible 
character afforded by p. Let A'^ be a normal subgroup of E. Further, let x be an irreducible 
character x of such that (0jv, x)n > ^- Then the Clifford code defined by {E, p, N, x) 
is the image of the orthogonal projector 



\N\ 



^X{n ^)p(n). 



(7.5) 



neN 



Under certain conditions we can construct a subsystem code from the Clifford code, 
in particular when E is the extraspecial p-group, the Clifford code C has a tensor product 
decomposition^ as C — A<Si B, where B is an irreducible CA^-module, A is an irreducible 
CL-module and L = Ce{N). In this case we can encode information only into the sub- 
system A, while the co-subsystem B provides additional protection. When encoded this 
way we say C is a Clifford subsystem code. The normal subgroup N consists of all errors 



^Strictly speaking the equality should be replaced by an isomorphism. 
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in E that act trivially on A. It is also called the gauge group of the subsystem code. Our 
main goal will be to show how to encode into the subsystem A. Therefore, our interest will 
center on the projectors for the Clifford code and the subsystem code and not so much on 
the parameters of the codes themselves. 

An alternate projector for a Clifford code with data {E, p, iV, x) can be defined in 
terms of Z{N), the center of N. The proof of this can be found in [88, Theorem 6]. This 
projector is given as 



where cp is an irreducible character of Z{N), that satisfies (x i Z{N)){x) — x(l)(/?(a;). In 
this case Q can be thought of as a stabilizer code in the sense of [35] i.e. 



In addition to the assumption that the error group is an extraspecial p-group we also assume 
that Z{E) < N. The inclusion of the center of E does not change the code but helps in 
analysis. Thus we have the following lemma. 

Lemma VII.8. Let {E, p, N, x) be the data of a Clifford code and (p an irreducible charac- 
ter of Z{N), the center of N, satisfying {x I Z{N)){x) = If E is an extraspe- 
cial p- group, then for all n in Z{N), ip{n) e \ ( = e^'^'^^/p^Q < k < p}. Further, if 
Z{E) < N, then for any n e Z{N), we have ip(n~^)p(n) E p{Z{N)). 

Proof. First we note that the irreducibilty of p implies that for any z in Z{E) we have 
p{z) = iol for some a; e C by Schur's lemma. The assumption that E is an extraspecial 
p-group forces lo e {C,^ | < /c < p} where C, = e^'^'^l'P. This is because = p for 

extraspecial p-groups. Secondly, we observe that </? is an irreducible additive character of 
Z{N) (an abelian subgroup of an extraspecial p-group) which implies that we must have 




(7.6) 



p{m) = (p{m) for any m in Z{N). 



(7.7) 
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(p{n) — for some < I < p, [103]. Together these observations imply that we can 
assume (p{n~^)I = Cl = p{z) for some < / < p and ^ e Z{E). Since Z{E) < N, it 
follows that Z{E) < Z{N) and Lp{n-^)p{n) is in p{Z{N)). □ 

Our goal is to use the stabilizer of Q for encoding and as a first step we will show that 
it can be computed from Z{N). The usefulness of such a projector is that it obviates the 
need to know the character (/?. Let S < p{E) be the stabilizer of Q. Then we claim that S 

is given as 

S = {^p{n-^)p{n) \ n e Z{N)}. 

We claim that S can be used for encoding the associated Clifford code. Then we will show 
how the encoding circuit of the Clifford code is to be modified so that we can encode the 
subsystem code derived from the Clifford code. 

Theorem VII.9. Let Q be a Clifford code with the data {E, p, N, x) and (p a constituent of 

the restriction ofx to Z = Z{N). Let E be an extraspecial p-group and Z{E) < N and 

I I ses 

Then S is the stabilizer ofQ and Im P — Q. 
Proof. We will show this in a series of steps. 

1) First we will show that S < p{Z). By Lemma VILS we know that (p{n~^)p{ri) is 
in p{Z), therefore S C p{Z). For any two elements ni,n2 G Z, we have Si = 

'^(^r^)p(^i)> -^2 = ¥^(^2 ^)p('^2) £ 5'andwecaneasily verify that s]^^S2 = cp{ni)p{n'^^) 
(p{n2^)p{n2) — (p{n2^ni) p{n^^n2) G -S", as p{n{^n2) is in p{Z). Hence S < p{Z). 

2) Now we show that S fixes Q. Let s E S and G Q. Then s = Lp{nr^) p{n) for some 
n E Z. The action of s on 1-0) is given as s — (p{n~^)p{n) — (p{n~^)(p{n) 1-0) = 
IV'), in other words S fixes Q. 
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3) Next, we show that l^"] = \Z\I\Z{E')\. If two elements n\ and in Z map to the same 
element in S, then Lp{n{^)p{n]) = (p{n2^)p{n2), that is p(n2) = (p{n^^n2)p{ni). From 
Lemma VII.8 it follows that p{n2) = CV(^i) for some < / < p. Since p{Z{E)) — 
^^j^T^k/pj I < A; < p}, we must have n2 = zrii for some z e Z{E). Thus, l-S"! = 

1^1/1^(^)1- 

4) Let T be a traversal of Z{E) in Z, then every element in Z can be written as zt for some 
z e Z{E) and t eT. From step 3) we can see that all elements in a coset of Z{E) in Z 
map to the same element in S, therefore, 

S = W{t-')p{t) 1 1 e T}. 

Recall that a projector for Q is given by 

' ' teT z&Z{E) 

But we know from step 3) that if 2; e Z{E), then ip{n~^)p{n) — (p{{zn)~^)p{zri). So 
we can simplify P' as 



' ' teT zeZ{E) 



Thus the projector defined by S is precisely the same as P' and P is also a projector for 
Q. 

From step 3) it is clear that 5" n Z{E) = {1} and by Lemma 111.10, 5" is a closed subgroup 
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of E. By Lemma in.9, Im P = Q is a stabilizer code. Hence S is the stabilizer of Q. □ 
Corollary VII.IO. Let Q be an [[n, r, d\] Clifford subsystem code and S its stabilizer. 



Then P is a projector for the subsystem code i.e. Q — Im P. 

Proof. By [90, Theorem 4], we know that an [[n, /c, r, d]] Clifford subsystem code is de- 
rived from a Clifford code with data (E, p, N, x)- This construction assumes that E is an 
extraspecial p-group and Z{E) < N < E. Since as subspaces the Clifford code and sub- 
system code are identical, by Theorem VII. 9 we conclude that the projector defined from 
the stabilizer of the subspace is also a projector for the subsystem code. □ 

Theorem VII. 9 shows that any Clifford code can be encoded using its stabilizer. As 
to a subsystem code, while Corollary VII.IO shows that there exists a projector that can 
be defined from its stabilizer, it is not clear how to use it so that one respects the subsys- 
tem structure during encoding. More precisely, how do we use the projector defined in 
Corollary VII.IO to encode into the information carrying subsystem A and not the gauge 
subsystem. This will be the focus of the next section. 

D. Encoding Subsystem Codes 

For ease of presentation and clarity henceforth we will focus on binary codes, though the 
results can be extended to nonbinary alphabet using methods similar to stabilizer codes, 
see [73]. Theorem Vn.9 shows that in order to encode Clifford codes we can use a projector 
derived from the underlying stabilizer to project onto the codespace. But in case of Clifford 
subsystem codes we know that Q = Ai^B and the information is to be actually encoded in 



Let 




(7.9) 
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A. Hence, it is not sufficient to merely project onto Q, we must also show that we encode 
into A when we encode using the projector defined in Corollary VII. 10. 

Let us clarify what we mean by encoding the information in A and not in B. Suppose 
that P maps |0) to 1-0)^ ® |0)^ and |1) to <8) ll)^. Then the information is actually 
encoded into B. Since the gauge group acts nontrivially on B, this particular encoding does 
not protect information. Of course a subsystem code should not encode (only) into B, but 
we have to show that the projector defined by P in equation 7.9 does not do that. 

We need the following result on the structure of the gauge group and the encoded 
operators of a subsystem code. Poulin [120] proved a useful result on the structure of the 
gauge group and the encoded operators of the subsystem code. But first a little notation. A 
basis for P„ is Xj, Zj, 1 <i < n, where Xi and Zi are given as 

n n 

Xi = 0X'- and Zi = 0Z'-. 

j=i j=i 

They satisfy the relations [Xj, Xj] = = [Zi, Zj]; [Xi, Zj] = 26ijXiZj. However, we can 
choose other generating sets {xi, Zi \ 1 < i < n} for Vn that satisfy similar commutation 
relations i.e., [xi,Xj] — — [zi,Zj] and = 25ijXiZj. These operators may act 

nontrivially on many qubits. Given an [[n, k, r, d]] code we could view the state space of the 
physical n qubits as that of n virtual qubits on which these Xi, Zi act as X and Z operators. 
In particular k of these virtual qubits are the logical qubits and r of them gauge qubits. The 
usefulness of these operators is that we can specify the structure of the stabilizer, the gauge 
group and the encoded operators. The following lemma makes this specification precise. 

Lemma VII.11. Let Q be an [[n, k, r, d\\2 subsystem code with gauge group, G and sta- 
bilizer S. Denote the encoded operators by Xi,Zi, 1 < i < k, where [Xi,Xj] = = 
[Zi, Zj]; [Xi, Zj] = 26ijXiZj. Then there exist operators {xi, Zi E Vn \ ^ ^ i ^ n} such 
that 
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/) S — {Zi, Z2,..., Zs), 

ii) G={S Z{Vn)), 
Hi) C-p^{S) — {G, Xi, Zi, Xk, Zk), 
iv) X^ ^ Xg^j-^i dfid Z ^ Zg^^^iy 1 i A/, 

where [zi, Zj] = [xj, Xj] = 0; [xi, Zi] = 2SijXiZi. Further, S defines an [[n, k + r]] stabilizer 
code encoding into the same space as the subsystem code and its encoded operators are 
given by {xg+i, Zgj^\, . . . , Xg+r, ^s+r; ^i, Zi, . . . , X^, Z^} 

Proof. See [120] for proof on the structure of the groups. Let Q — AiSiB, then dim A — 2'^ 
and dimB — . From Corollary VII. 10 we know that the projector defined by 5" also 
projects onto Q (which is 2'^+'"-dimensional) and therefore it defines an [[n, k + r]] stabilizer 
code. From the definition of the operators Xi, Zi and X^, Z^ and the fact that 

^V„{S) — {S, Xg^i, Zg^i, . . . , Xg^rj ^s+r^l: -^1, ■ ■ ■ , X^, Z^, Z{Vn)) 

we see that Xj, 2;^, for s + 1 < i < r act like encoded operators on the gauge qubits, 
while Xi, Zi continue to be the encoded operators on the information qubits. Together they 
exhaust the set of 2{k + r) encoded operators of the [[n, k + r]] stabilizer code. □ 

We observe that the logical operators of the subsystem code are also logical operators 
for the underlying stabilizer code, so if the stabilizer code and the subsystem code have 
the same logical all zero state, then Lemma Vn.ll suggests that in order to encode the 
subsystem code, we can treat it as stabilizer code and use the same techniques to encode. 
If the logical all zero code word was the same for both the codes, then because they have 
the same logical operators we can encode any given input to the same logical state in both 
cases. Using linearity we could then encode any arbitrary state. Encoding the all zero state 
seems to be the key. Now, even in the case of the stabilizer codes, there is no unique all 
zero logical state. There are many possible choices. The reader can refer to the appendix 
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for examples. Given the encoded operators it is easy to define the logical all zero state as 
the following definition shows: 

Definition VII.12. A logical all zero state of an [[n, A;, r, d]] subsystem code is any state 
that is fixed by its stabilizer and k logical Z operators. 

This definition is valid in case of stabilizer codes also. This definition might appear a 
little circular. After all, we seem to have assumed the definition of the logical Z operators. 
Actually, this is a legitimate definition because, depending on the choice of our logical op- 
erators, we can have many choices of the logical all zero state. In case of the subsystem 
codes, this definition implies that the logical all zero state is fixed hyn — r operators, con- 
sequently it can be any state in that 2^ -dimensional subspace. If we consider the [[n, k + r]] 
stabilizer code that is associated to the subsystem code, then its logical zero is additionally 
fixed by r more operators. So any logical zero of the stabilizer code is also a logical all zero 
state of the subsystem code. It follows that if we know how to encode the stabilizer code's 
logical all zero, we know how to encode the subsystem code. We are interested in more 
than merely encoding the subsystem code of course. We also want to leverage the gauge 
qubits to simplify and/or make the encoding process more robust. Perhaps a few examples 
will clarify the ideas. 
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1. Illustrative Examples 

Consider the following [[4, 1, 1, 2]]2 subsystem code, with the gauge group G, stabilizer S 
and encoded operators given by L. 



S = 
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The encoded operators of this code are given by 
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The associated [[4, 2]] stabilizer code has the following encoded operators. 
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It will be observed that the encoded X operators of [[4, 2]] are in a form convenient for 
encoding. We treat the [[4, 1, 1, 2]] code as [[4, 2]] code and encode it as in Figure 1. The 
gauge qubits are permitted to be in any state. 

Assuming = a |0) + 6 |1), the logical states up to a normalizing constant are 

|0> = a(|0000) + |1111)) +6(|0101) + |1010)), 
|T> = a(|0011) + |1100)) +6(|0110) + |1001)). 
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|0) 
|0) 

Fig. 1. Encoding the [[4, 1,1,2]] code (Gauge qubits can be in any state) 
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It can be easily verified that S stabilizes the above state and while the gauge group acts 
in a nontrivial fashion, the resulting states are still orthogonal. In this example we have 
encoded as if we were encoding the [[4,2]] code. Prior to encoding the gauge qubits can be 
identified with physical qubits. After the encoding however such a correspondence between 
the physical qubits and gauge qubits does not necessarily exist in a nontrivial subsystem 
code. Since the encoded operators of the subsystem code are also encoded operators for 
the stabilizer code, we are guaranteed that the information is not encoded into the gauge 
subsystem. 

As the state of gauge qubits is of no consequence, we can initialize them to any state. 
Alternatively, if we initialized them to zero, we can simplify the circuit as shown in Fig- 
ure 2. 



|0) 
|0) 

|0) 





H 








— 1 


• 


( 




3 


— ( 


' ( 

) ( 


) 

3 



Fig. 2. Encoding the [[4, 1, 1, 2]] code (Gauge qubits initialized to zero) 
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The encoded states in this case are (again, the normalization factors are ignored) 



5> 



|0000) + |1111) , 



|0011) + |1100) . 



The benefit with respect to the previous version is that at the cost of initializing the gauge 
qubits, we have been able to get rid of all the encoded operators associated with them. 
This seems to be a better option than randomly initializing the gauge qubits. Because it is 
certainly easier to prepare them in a known state like |0), rather than implement a series of 
controlled gates depending on the encoded operators associated with those qubits. 

At this point we might ask if it is possible to get both the benefits of random initial- 
ization of the gauge qubits as well as avoid implementing the encoded operators associated 
with them. To answer this question let us look a little more closely at the previous two 
encoding circuits for the subsystem codes. We can see from them that it will not work in 
general. Let us see why. If we initialize the gauge qubit to 1 1) instead of |0) in the encoding 
given in Figure 2, then the encoded state is 



Both these states are not stabilized by S, indicating that these states are not in the code 
space. 

In general, an encoding circuit where it is simultaneously possible initialize the gauge 
qubits to random states and also avoid the encoded operators is likely to be having more 
complex primary generators. For instance, let us consider the following [[4, 1,1,2]] sub- 



10100) + |ion) , 



0111) + 11000). 
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system code: 



S = 
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The encoded operators of this code are given by 



L = 


/ 


Z 


I 


X 




Xi 




Z 


I 


I 


Z 







The associated [[4, 2]] stabilizer code has the following encoded operators. 





Z 


I 


X 


I 








I 


z 


I 


X 






T = 














I 


z 


z 


I 




Z3 




Z 


I 


I 


z 




Zl 



The encoding circuit for this code is given in Figure 3. 
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Fig. 3. Encoding [[4, 1, 1, 2]] code (Encoded operators for the gauge qubits are trivial and 
gauge qubits can be initialized to random states) 



In this particular case, the gauge qubits (as well as the information qubits) do not 
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require any additional encoding circuitry. In this case we can initialize the gauge qubits to 
any state we want. But, the reader would have observed we did not altogether end up with 
a simpler circuit. The primary generators are two as against one and the complexity of the 
encoded operators has been shifted to them. So even though we were able to get rid of the 
encoded operator on the gauge qubit and also get the benefit of initializing it to a random 
state, this is still more complex compared to either of encoders in Figures 1 and 2. Our 
contention is that it is better to initialize the gague qubits to zero state and not implement 
the encoded operators associated to them. 

2. Encoding Subsystem Codes by Standard Form Method 

The previous two examples might lead us to conclude that we can take the stabilizer of 
the given subsystem code and form the encoded operators by reducing the stablizer to its 
standard form and encode as if it were a stabilizer code. However, there are certain subtle 
points to be kept in mind. When we form the encoded operators we get k + r encoded 
operators; we cannot from the stabilizer alone conclude which are the encoded operators 
on the information qubits and which on the gauge qubits. Put differently, these operators 
belong to the space Cp^{S) \ S = GCp^{G) \ SZ{Vn)- It is not guaranteed that they 
are entirely in C-p^{G) i.e., we cannot say if they act as encoded operators on the logical 
qubits. This implies that in general all these operators act nontrivially on both A and B. 
Consequently, we must be careful in choosing the encoded operators and the gauge group 
must be taken into account. We give two slightly different methods for encoding subsystem 
codes. The difference between the two methods is subtle. Both methods require the gauge 
qubits to be initialized to zero. In the second method (see Algorithm 2) however, we can 
avoid the encoded operators associated to them. Under certain circumstances, we can also 
permit initialization to random states. 

Correctness of Algorithm 1. Since stabilizer Sa > S, the space stabilized by Sa is a 
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Algorithm 1 Encoding subsystem codes - Standard form method 1 
Require: Gauge group, G — {S,Xs+i,Zs+i, ■ ■ ■ ,Xs+r,Zs+r,^I) and stabilizer, S 

{zi, . . . , Zn-k-r) of the [[n, k, r, d]] subsystem code. 

Ensure: [xi, Xj] = [zi, Zj] = 0; [xi, Zj] = 2xiZi6ij 

1: Form Sa = {S, Zg+i, . . . , Zg+r), where s = n — k — r 
2: Compute the standard form of Sa as per Lemma VII. 2 
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4: Encode using the primary generators of Sa and X^ as encoded operators, see 
Lemma Vn.6; all the other {n — k) qubits are initialized to |0). 



subspace of the Ai^ B, the subspace stabilized by 5". As |5'a|/|-S'| = 2^, the dimension of 
the subspace stabilized by Sa is 2'^^^'/2^' = 2^. Additionally, the generators z<j+i, . . . , Zgj^r 
act trivially on A. The encoded operators as computed in the algorithm act nontrivially on 
A and give 2*^ orthogonal states; thus we are assured that the information is encoded into 
A. 

Let us encode the [[9, 1, 4, 3]] Bacon-Shor code using the method just proposed. The 
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stabilizer and the gauge group are given by 
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Let us form Sa by augmenting S with G^. Then 
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The encoded X and Z operators are XjXgXg and respectively. After putting Sa 

in the standard form, and encoder for this code is given in Figure 4. 
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Fig. 4. Encoder for the [[9, 1, 4, 3]] code. This is also an encoder for the [[9, 1, 3]] code. 
If on the other hand we had formed Sa by adding instead, then Sa would have 
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The encoded operators remain the same. In this case the encoding circuit is given in Fig- 
ure 5. This circuit has fewer CNOT gates, though the number of single qubit gates has 
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Fig. 5. Encoder for the [[9, 1, 4, 3]] code with fewer CNOT gates. 



increased. Since we expect the implementation of the CNOT gate to be more complex than 
the H gate, this might be a better choice. In any case, this demonstrates that by exploiting 
the gauge qubits one can find ways to reduce the complexity of encoding circuit. 

The gauge qubits provide a great degree of freedom in encoding. We consider the 



155 



following variant on standard form encoding, where we try to minimize the the number 
of primary generators. This is not guaranteed to reduce the overall complexity, since that 
is determined by both the primary generators and the encoded operators. Fewer primary 
generators might usually imply encoded operators with larger complexity. In fact we have 
already seen, that in the case of [[9, 1, 4, 3]] 2 code that a larger number of primary generators 
does not necessarily imply higher complexity. However, it has the potential for lower 
complexity. 

Algorithm 2 Encoding subsystem codes - Standard form method 2 
Require: Gauge group, G = {S^Xs+iiZg+i-, ■ ■ ■ ^Xs+r-iZs+ri^I) and stabilizer, S — 

{zi, . . Zn-k-r) of the [[n, k, r, d]] subsystem code. 

Ensure: [xj, Xj] = [zj, Zj] = 0; [xj, Zj] = 2xiZi5ij 

1 : Compute the standard form of S as per Lemma Vn.2 
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2: Form Sa — {S, Zs+\, . . . , Zg+r)', where s — n — k — r 
3: Compute the standard form of Sa as per Lemma VII. 2 
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4: Compute the encoded operators Xi,..., X^ as 
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5: Encode using the primary generators of -S" and Xi as encoded operators, accounting for 
TTl and 7r2, see Lemma VII.6; all the other {n — k) qubits are initialized to |0). 
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The main difference in the second method comes in lines 1 and 5. We encode using 
the primary generators of the stabilizer of the subsystem code instead of the augmented 
stabilizer. The encoded operators however remain the same as before. 

Correctness of Algorithm 2. The correctness of this method lies in the observation 
we made earlier (see discussion following Definition Vn.l2), that any logical all zero state 
of the stabilizer code is also a logical all zero of the subsystem code and the fact that both 
share the encoded operators on the encoded qubits. 

The encoded operators are given modulo the elements of the gauge group as in Algo- 
rithm 1, which implies that the their action might be nontrivial on the gauge qubits. The 
benefit of the second method is when S and Sa have different number of primary genera- 
tors. The following aspects of both the methods are worth highlighting. 

1) The gauge qubits must be initialized to |0) in both methods. 

2) In Algorithm 1, the number of primary generators of S and Sa can be different leading 
to a potential increase in complexity compared to encoding with S. 

3) In both methods, the encoded operators as computed are modulo Sa- Consequently, the 
encoded operators might act nontrivially on the gauge qubits. 

3. Encoding Subsystem Codes by Conjugation Method 

The other benefit of subsystem codes is the random initialization of the gauge qubits. We 
now give circuits where we can encode the subsystem codes to realize this benefit. But 
instead of using the standard form method we will use the conjugation method proposed by 
Grassl et ah, [73] for stabilizer codes. After briefly reviewing this method we shall show 
how it can be modified for encoding subsystem codes. 

The conjugation encoding method can be understood as follows. It is based on the idea 
that the Clifford group acts transitively on the Pauli error group. It is possible to transform 
the stabilizer matrix of any [[n, k, d]] stabilizer code into the matrix (00|/„_fcO). For a code 
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with this stabilizer matrix the encoding is trivial. We simply map to |0) The 
associated encoded X and Z operators are given by (0/fe|00) and (00|0/fc) respectively. 
Here we give a sketch of the method for the binary case, the reader can refer to [73] for 
details. Assume that the stabilizer matrix is given by S. Then we shall transform it into 

(00|/„_fcO) using the following sequence of operations. 

{X\Z) ^ (/„_fcO|0) ^ (00|4_fcO). (7.10) 

This can be accomplished through the action of iJ = [ } ] , P = [ J ^ ] and CNOT gates on 
the Pauli group under conjugation. The action of H on the ith qubit of (ai , . . . , a„ 1 6i , . . . , 6„) 
transforms it as 

(oi, . . . , an\bi, . . . , 6„) 1-4 (oi, . . . , bi, . . . , a„|6i, . . . , ai, . . . , (7.11) 

These modified entries have been highlighted for convenience. The phase gate P on the ith 
qubit transforms (ai, . . . , a„|6i, . . . , 6„) as 

p. 

(oi, . . .,an\bi, . . . ,6„) 1-4 (oi, . . . ,ai, . . . ,a„|6i, . . . , ai -t- bi, . . .,bn). (7.12) 

We denote the CNOT gate with the control on the ith qubit and the target on the jth qubit 
by CNOT*'^. The action of the CNOT*'^ gate on (oi, . . . , a„|6i, . . . , 6„) is to transform it to 

(oi, . . . , cij-i, aj -|- aj, ctj-\-i • • • , Onl^i) ■ ■ ■ i bi-i, bj -I- bj, 6^+1, . . . , 

)■ (7.13) 

Note that the jth entry is changed in the X part while the ith entry is changed in the Z part. 
For example, consider 

(1, 0, 0, 1, 0|0, 1, 1, 0, 0) Ti (1, 0, 0, 0, 0|0, 1, 1, 0, 0), 
(1,0,0,1,010,1,1,1,0)'^''^ (1,0,0,0,0|1,1,1,1,0). 
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Based on the action of these three gates we have the following lemmas to transform error 
operators. 

Lemma VII.13. Assume that we have a error operator of the form (ai, . . . , a„|6i, . . . , 
Then we apply the following gates on the ith qubit to transform the stabilizer, transforming 
(oj, hi) to (a, j3) as per the following table. 



{ai, bi) 


Gate 


{a, (3) 


(0,0) 


I 


(0,0) 


(0,1) 


H 


(1,0) 


(1,0) 


I 


(1,0) 


(1,1) 


P 


(1,0) 



Let X denote 1 + x, then the transformation to {ai, . . . , an\0, . . . ,0) is achieved by 

n 
1=1 

For example, consider the following generator (1,0,0,1,0|0,1,1,1,0). This can be 
transformed to (1, 1, 1, 1, 0|0, 0, 0, 0, 0) by the application of I^H(S>H(S)P(S>I. 

Lemma Vn.l4. Let e be an error operator of the form (oi, . . . ,ai — 1, ■ ■ ■ , OnlO, . . . , 0). 
Then e can be transformed to (0, . . . , 0, = 1, 0, . . . , 0|0, . . . , 0) 

n 

Y[ [cNor'^]"^ 

j=l,i^j 

As an example (1, 1, 1, 1, 0|0, 0, 0, 0, 0) can be transformed to (0, 1, 0, 0, 0|0, 0, 0, 0, 0) 

by 

CNOT^'^ • CNOT^'^ • CNOT^'^. 

The first step involves making the Z portion of the stabilizer matrix all zeros. This is 
achieved by single qubit operations consisting of H and P performed on each row one by 
one. 
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Note that we must also modify the other rows of the stabilizer matrix according to the 
action of the gates applied. 

Once we have a row of stabilizer matrix in the form (a|0), where a is nonozero we can 
transform it to the form (0, . . . , 0, = 1, 0, . . . , 0|0) by using CNOT gates. Thus it is easy 
to transform {X\Z) to (/„_fcO|0) using CNOT, P and H gates. The final transformation 
to (0|/n_fcO) is achieved by using H gates on the first n — k qubits. At this point the 
stabilizer matrix has been transformed to a trivial stabilizer matrix which stabilizes the 
state |0)® \ip). The encoded operators are (0/^1 0) and (0|0/fc). Let T be the sequence 
of gates applied to transform the stabilizer matrix to the trivial stabilizer matrix. Then T 
applied in the reverse order to |0)'^ gives the encoding circuit for the stabilizer code. 

Now we shall use this method to encode the subsystem codes. The main difference is 
that instead of considering just the stabilizer we need to consider the entire gauge group. 
Let the gauge group be G = {S, Gz, Gx), where Gz — {zg+i, ■ ■ ■ , -^s+r). and Gx — 
{xs+i-, • • • , Xs+r)- The idea is to transform the gauge group as follows. 





S 













Is 








G = 


Gz 


I— > 





















Gx 







Ir 















At this point the gauge group has been transformed to a group with trivial stabilizer and 
trivial encoded operators for the gauge qubits and the encoded qubits. The sequence of 
gates required to achieve this transformation in the reverse order will encode the state 
|0)'^ \(f)) lip). The state |0) corresponds to the gauge qubits and it can be initialized to 
any state, while {i/j) corresponds to the input. 
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Algorithm 3 Encoding subsystem codes - conjugation method 

Require: Gauge group, G — {S,Gz,Gx), where Gz — {zg+i, ■ ■ ■ , Zg+r) , and Gx — 

(xs+i, . . . , Xg+r) and stabilizer, S — {z-i, . . . , Zn-k-r) of the [[n, k, r, d]\ subsystem 

code. 

Ensure: [xi, Xj] = [zi, zj] = 0; [xi, zj] = 2xiZi5ij 
1 : Assume that G is the following form 



G 



G, 



2: for alH = 1 to s + r do 

3: Transform Zi to z'^ — {ai, ... , a„|0, . . . , 0) using Lemma VII.13 
4: Transform to (0, . . . , Oj = 1, . . . , 0|0) using Lemma Vn.14 
5: Perform Gaussian elimination on column i for rows j > i 
6: end for 

7: Apply H gate on each qubit i = ltoi = s + r 
8: for alH = s + 1 to s + r do 

9: Transform Xi to x\ — (oi, . . . , a„|0, . . . , 0) using Lemma VU.IB 
10: Transform to (0, . . . , a, = 1, . . . , 0|0) using Lemma VII.14 
1 1 : Perform Gaussian elimination on column i for rows j > i 
12: end for 



In the above algorithm, we assume that whenever a row is transformed according to 
Lemma V11.13 or V11.14, all the other rows are also transformed according to the transfor- 
mation applied. 

Correctness of Algorithm 3. The correctness of the algorithm is straightforward. As 
G has full rank of n — A; + r, for each row of G, we will be able to find some nonzero pair 
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(a, b) so that the the transformation in lines 2-6 can be achieved. When S and Gz are in 
the form (0|/s+rO), the rows in Gx are in the form 



A B 



D 



The zero columns of Gx are consequence of the requirement to satsify the commutation 
relations with (transformed) S and Gz- For instance. The first n — A; — r are all zero because 
they must commute with (0|/sO), the elements of the transformed stabilizer. The submatrix 
A must have rank r, otherwise at this point one of the rows of Gx commutes with all the 
rows of Gz and the condition that we have there are r hyperbolic pairs is violated. It is 
possible therefore to transform A to the form (0/^01 0). It cannot be any other form because 
then we would not have the r hyperbolic pairs. The applied transformations transform G to 
the form given in equation (7.14). The encoded operators for this gauge group are clearly 
(0/fe|0) and (OjO/fc). We conclude with a simple example that illustrates the process. 

Example VII.15. To compare with the standard form method, we consider the [[4, 1, 1, 2]] 
code again. Let the gauge group G, stabilizer S and encoded operators given by L. 



G = 



X 


X 


X 


X 




Zl 


z 


z 


z 


z 




Z2 


X 


X 


X 


X 




Zl 


z 


z 


z 


z 




Z2 


I 


I 


z 


z 






I 


X 


I 


X 




zz 
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In matrix form G can be written as 



G = 



1 


1 


1 


1 


























1 


1 


1 


1 




















1 


1 





1 





1 















The transformations consisting o/Ti = C^OT^^'^CHOT^^^C^OT^^^ followed by T2 = I ^ 
H ®H ®H maps G to 





1 

























1 























Ti 
1— >• 

















1 


1 


1 


T2 





1 


1 


1 


































1 


1 


t— > 








1 


1 



















1 





1 































1 





1 



Now transform the second row using T3 = CNOT^'^CNOT^'^. Then transform using T4 = 
CNOT^'^ We get 





1 

























1 




























1 




















T4 

1— > 





1 
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1 
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1 



Applying T^ — H®H®I®H gives us 

















1 











n 
1— >• 

















1 



















1 





































1 



We could have chosen T^ = H®H®I®I, since the effect of H on the fourth qubit is 
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trivial. The complete circuit is given in Figure 6. 



|0) 
|0) 

\9) 



H 



H 



H 



H O 



^ — e — H — (> 



e — H — e 



Fig. 6. Encoding [[4, 1, 1, 2]] code by conjugation method 

By switching the target and control qubits of the CNOT gates in and we can 
show that this circuit is equivalent to the circuit shown in Figure 7. 



|0) 





H 
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H 


1 


1 


3 ( 
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1 
1 




M ' 

1 

> 1 
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) 


1 _^ 




' ( 


) 



\9) 

Fig. 7. Encoding [[4, 1, 1, 2]] code by conjugation method 

It is instructive to compare this circuit with the one given earlier in Figure 1. The 
dotted lines show the additional circuitry. Since the gauge qubit can be initialized to any 
state, we can initialize \g) to |0), which then gives the following logical states for the code. 



|0> = |0000) + + |0011) + |1100) , 

|T> = |0000) + |1111) - |0011) - |1100). 



(7.15) 
(7.16) 



It will be observed that IIXX acts as the logical Z operator while IZIZ acts as the 
logical X operator. We could flip these logical operators by absorbing the H gate into |^). 
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If we additionally initialize \g) to |0), we will see that the two CNOT gates on the second 
qubit can be removed. The simplified circuit is shown in Figure 8. 



|0) 



— H 


( 


1 


r 




( 




) 





< ( 

? ^ 


) 

5 



|0) 

Fig. 8. Encoding [[4, 1, 1, 2]] code by conjugation method - optimized 

This is precisely, the same circuit that we had arrived earlier in Figure 2 using the 
standard form method. 

The preceding example provides additional evidence in the direction that it is better to 
initialize the gauge qubits to zero and avoid the encoding operators on them. 

E. Syndrome Measurement for Nonbinary F^-linear Codes 

Decoding of nonbinary quantum codes has not been studied as well as binary codes. En- 
coding of Fy-linear nonbinary quantum codes was investigated in [73]. The authors suggest 
that the decoder is simply the encoder running backwards. In this context one important 
task is that measuring the syndrome so that appropriate error correction maybe performed. 
While binary codes have been well studied in this regard similar efforts have not been 
invested in the nonbinary case. Here we give a method that allows us to measure the syn- 
drome for F^-linear nonbinary quantum codes. We also show that an -linear [[n, k, r, d]]q 
code requires n — k — r syndrome measurements. But first we need the definition of the 
following nonbinary gates, see [73]. 

i) X{a) \x) — \x-\-a) 

ii) Zip) \x) = \x),uj^ e^^^^/P 
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iii) M(c) \x) = |ar) ,c e 

iv) F\x) = j=j:^^^^u'^'>/^(^y^y) 

v) A \x) \y) = \x) \x + y) 

Graphically, these gates are represented below. 



X(a) 




m 




c 




F 



i) 

Consider the following circuit. 



ii) 



iii) 



iv) 



V) 



\a) 

\y) 







— ( 


1 








V- 


9x — 


-< 





\a) 

\y + 05-0:) 



Alternatively, this circuit maps \ a)\x) to \ a) X{agx) \y). Observe that this circuit effectively 
applies X{agx) on the second qudit. Using the linearity, we can analyze the following 
circuit. 



|0) —F 



— 9 a 



^-[9^ EaeF„ I") \y + (^9x) 



The above circuit maps |0) \y) to XlaeF, l*^) ^{oi9x) \y)- Using the fact that FX{h)F'^ = 
Z{h), we can show that the following circuit maps \h) \y) to \h) Z{hgz) \y). 



\y) 



Ft 



91 



e— 9^ 



Z{hg,) 



If we wanted to apply a general OT^oxdAor X{agx)Z{agz) to the second qudit conditioned on 
the first one, then we can combine the previous circuits as follows. 







— 1 


\ 




— 1 
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-Ft 




9-.' 




V- 


9z 




F 




9x 






9x — 




-< 








-< 





gx — X(agx)Z(ag^) \y) 
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The above implementation is not optimal in terms of gates, but it will suffice for our pur- 
poses. Consider an [[n, k, r, d]]q code. Let E be an error in Gn, (see 3.2). If E is detectable, 
then E does not commute with some element(s) in the stabilizer of the code. Let 



9 = {9x\gz) = (0, . . . , 0, . . . , an|0, . . . , 0, . . . , 6n) e F^", 

where {aj,bj) ^ (0,0), be a generator of the stabilizer. Then for all detectable errors 
that do not commute with a multiple of g, the following circuit gives a nonzero value on 
measurement. 



|0) 



Ft 



Ft 



Ft 



^— an 



Note that whenever (a^, bi) = (0, 0), then we leave that qudit alone. Similarly if or bi 
are zero, then we do not implement the corresponding portion. Let the input to the above 
circuit be F |^), where IV') is an encoded state. It can be easily verified that the above 
circuit maps the state |0) F IV') to 

J]Ft|a)X(a5,)Z(a5,)F|V^). 

Let X{gx)Z{gz)E — u;^'^''/p^^^ EX{gx)Z{gz), where X{gx)Z{gz) is corresponding matrix 
representation of g. By Lemma ni.5. we have X{agx)Z{agz)E — uj^^i/p^°'^^ EX{gx)Z{gz). 
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Thus we can write 

J2 l«> X{ag,)Z{ag,)E jV') = Yl l«) ^'"''^"^'''^ EX{ag,)Z{ag,) , 

aeVg aeVq 

where we have made use of the fact that X{agx)Z{agz) {ip) — {ip) as X{agx)Z{agz) is in 
the stabilizer. The final state is given by 

Y,F''\a)X{ag,)Z{ag,)E\i;) = J] Ft |a) a;*^"*)^; j^,) , 

aeVg aeWg 

/3eF, a&g 

where the last equality follows from the property of the characters of F^. Next we ob- 
serve that the error aE, where a e gives \at) on measurement. Strictly speaking we 
refer to the preimage of aE in G„. Hence the syndrome qudit can take q different values. 
Since every detectable error does not commute with some Fg -multiple of a stabilizer gen- 
erator, we have the following lemma on the necessary and sufficient number of syndrome 
measurements. 

Lemma VII.16. Given an ¥q-linear [[n, k, r, d]]q Clifford subsystem code, n — k — r syn- 
drome measurements are required for decoding it completely. 

Proof. Let be a generator of the stabilizer of the subsystem code. By Theorem V.IO and 
Lemma VLl, for every generator g there exists at least one detectable error that does not 
commute with g but commutes with all the other generators. This error can be detected only 
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by measuring g. Thus we need to measure all the generators of the stabilizer, equivalently 
n — k — r syndrome measurements must be performed. 

Every correctable error takes the code space into a -dimensional orthogonal sub- 
space in the 5" -dimensional ambient space. Each of these errors will give a distinct syn- 
drome. This implies that we can have q^-^~'^ distinct syndromes. Since each syndrome 
measurement can have q possible outcomes and there aren — k — r generators, these mea- 
surements are sufficient for performing error correction. □ 

This parallels the classical case where an [n, k, d]q code requires n — k syndrome bits. 
A subtle caveat must be issued to the reader. If we choose to perform bounded distance 
decoding, then it maybe possible that the set of correctable errors can be distinguished by 
a smaller number of syndrome measurements. But even in the case of (classical) bounded 
distance decoding it is often the case that we need to measure all the syndrome bits. 

F. Conclusions 

In this paper, we have demonstrated that the subsystem codes can be encoded using the 
techniques used for stabilizer codes. In particular, we have considered two methods for en- 
coding stabilizer codes - the standard form method and the conjugation method. While the 
standard form method explored here required us to initialize the gauge qubits to zero, it ad- 
mits two two variants and seems to have the potential for lower complexity; the exact gains 
being determined by the actual codes under consideration. The conjugation method allows 
us to initialize the gauge qubits to any state. The disadvantage seems to be the increased 
complexity of encoding. It must be emphasized that the standard form method is equiv- 
alent to the conjugation method and it is certainly possible to use this method to encode 
subsystem codes so that the gauge qubits can be initialized to arbitrary states. However, it 
appears to be a little more cumbersome and for this reason we have not investigated this in 
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this chapter. There is yet another method for encoding stabilizer codes based on the tele- 
portation due to Knill. We expect that gauge qubits can be exploited even in this method to 
reduce its complexity. It would be interesting to investigate fault tolerant encoding schemes 
for subsystem codes and how gauge qubits can be used to improve fault tolerant thresholds. 
Finally, we mention that it is still open how to leverage the subsystem coding in the one 
way quantum computer model. 

G. Appendix 

The logical states of a stabilizer code. We assume that our basis input states are of the 
form |0) !«! . . . ftfc), where G |0, 1). Clearly, we have freedom in the choice of the 
states into which each of these states are encoded to. Additionally, we have freedom in 
the choice of the encoded operators though they are not entirely unrelated. Perhaps, this is 
best illustrated through an example. Let us consider Shor's [[9, 1, 3]]2 code. A choice of the 
logical states for this code is 

|0> = (|000) + |111))(|000) + |111))(|000) + |111)), 
|T> = (|000) - |111))(|000) - |111))(|000) - |111)). 

For this choice of the encoded states the logical Z operator is X®'^ and the logical X 
operator is Z®\ On the other hand, let us see what happens if we choose the logical states 
as follows 

|o> = looooooooo) + lOOOllllll) + IlllOOOlll) + IllllllOOO) , 
|T) = llllllllll) + IlllOOOOOO) + loooiiiooo) + lOOOOOOlll) . 

In this case the encoded X operator is X®^ and encoded Z operator is Z®'^ ; they are flipped 
with respect to the previous choice! 
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So it becomes apparent that the assignment of the encoded operators as logical Z or 
X is flexible and it seems to depend on the choice of the logical states. But are we free 
to choose any basis of the codespace as the encoded logical states. We can show that this 
cannot be. For instance let us choose the logical zero state to be a superposition of the 
previous two assignments. Then we have 

|0> = (|000) + |111))(|000) + |111))(|000) + |111)) 
+ looooooooo) + lOOOllllll) + IlllOOOlll) 
+ IllllllOOO). 

The possibilities for the logical Z operator" are ^X®\ ±Z®\ ±X®' Z®\ But for 
none of these operators we have Z\Q) = |o). As these are the only possible encoded 
operators (modulo the stabilizer which acts trivially in any case), this is not a valid choice 
for I O). This raises the question what are all the possible valid choices for the logical states. 
Let us look at yet another choice of logical states. 

|0> = (|000)-|111))(|000)-|111))(|000)-|111)), 
|T> = (|000) + |111))(|000) + |111))(|000) + |111)). 

In this case, the encoded Z and X operators are —X®^ and Z®^ respectively. This gives 
us a clue as to the possible logical all zero states for a given stabilizer code. The all zero 
logical state is the state in the code space that is fixed by the stabilizer and the logical Z 
operators. Assuming that S is the stabilizer and C-p^{S), its centralizer, we can can pick 
any k independent commuting generators in Cp^{S) \ SZ{Vn) as Z operators. Hence, we 
have the following lemma. 

Lemma VII.17. Let S be the stabilizer of an [[n, A;, d]]2 stabilizer code. If L < C-p^{S) is 
"including scalar multiples of i will not change our conclusions. 
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any subgroup generated by n commuting generators such that L fl Z{Vn) — I and S < L, 
then the state stabilized by L is a valid logical all zero state for the stabilizer code defined 
byS. 

The implicit choice of | O) made in Lemma VII.2 (by picking the encoded Z operators, 
at least the representatives) is convenient in the sense it allows us to speak of a canonical | O) 
without ambiguity. This |0) can be conveniently identified with the state P |0)® , where it 
will be recalled that P is the projector for the stabilizer code given as 

I I MeS 
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CHAPTER Vm 

QUANTUM LDPC CODES FOR ASYMMETRIC CHANNELS* 
Recently, quantum error-correcting codes were proposed that capitalize on the fact that 
many physical error models lead to a significant asymmetry between the probabilities for 
bit flip and phase flip errors. An example for a channel which exhibits such asymmetry 
is the combined amplitude damping and dephasing channel, where the probabilities of bit 
flips and phase flips can be related to relaxation and dephasing time, respectively. We give 
systematic constructions of asymmetric quantum stabilizer codes that exploit this asymme- 
try. Our approach is based on a CSS construction that combines BCH and finite geometry 
LDPC codes. 

In many quantum mechanical systems the mechanisms for the occurrence of bit flip 
and phase flip errors are quite different. In a recent paper loffe and Mezard [77] postulated 
that quantum error-correction should take into account this asymmetry. The main argument 
given in [77] is that most of the known quantum computing devices have relaxation times 
(Ti) that are around 1—2 orders of magnitude larger than the corresponding dephasing times 
(T2). In general, relaxation leads to both bit flip and phase flip errors, whereas dephasing 
only leads to phase flip errors. This large asymmetry between Ti and T2 suggests that 
bit flip errors occur less frequently than phase flip errors and a well designed quantum 
code would exploit this asymmetry of errors to provide better performance. In fact, this 
observation and its consequences for quantum error correction, especially quantum fault 
tolerance, have prompted investigations from various other researchers [2, 52, 148]. 

Our goal will be as in [77] to construct asymmetric quantum codes for quantum mem- 

*(c)2008 IEEE. Reprinted from, P. K. Sarvepalli, M. Rotteler, and A. Klappenecker. 
"Asymmetric quantum LDPC codes". In Proc. 2008 IEEE Intl. Symposium on Inform. 
Theory, Toronto, Canada, Jul 6-11, pp. , 2008. 
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ories and at present we do not consider the issue of fault tolerance. We first quantitatively 
justify how noise processes, characterized in terms of Ti and T2, lead to an asymmetry in 
the bit flip and phase flip errors. As a concrete illustration of this we consider the amplitude 
damping and dephasing channel. For this channel we can compute the probabilities of bit 
flip and phase flips in closed form. In particular, by giving explicit expressions for the ratio 
of these probabilities in terms of the ratio T\jTi, we show how the channel asymmetry 
arises. 

After providing the necessary background, we give two systematic constructions of 
asymmetric quantum codes based on BCH and LDPC codes, as an alternative to the ran- 
domized construction of [77]. 

A. Background 

Recall that a quantum channel that maps a state p to 

{\-Vx-Vy- Pz)p + PxXpX + PyYpY + PzZpZ, (8.1) 

with I = [II], X = [%],¥ = [° -^], Z = [IW is called a Pauli channel. For a Pauli 
channel, one can respectively determine the probabilities Px,Py,Pz that an input qubit in 
state p is subjected to a Pauli X, Y, or Z error. 

A combined amplitude damping and dephasing channel £ with relaxation time Ti and 
dephasing time T2 that acts on a qubit with density matrix p — {Pij)i,je{o,i} for ^ time t 
yields the density matrix 

This channel is interesting as it models common decoherence processes fairly well. We 
would like to determine the probability px, Py, and pz such that an X, Y, or Z error occurs 



174 



in a combined amplitude damping and dephasing channel. However, it turns out that this 
question is not well-posed, since £ is not a Pauli channel, that is, it cannot be written in 
the form (8.1). However, we can obtain a Pauli channel £t by a technique called twirling 
[45, 50]. In our case, the twirling consists of conjugating the channel £ by Pauli matrices 
and averaging over the results. The resulting channel £t is called the Pauli-twirl of £ and 
is explicitly given by 

Ae{l,X,Y,Z} 

Theorem VIII. 1. Given a combined amplitude damping and dephasing channel £ as 
above, the associated Pauli-twirled channel is of the form 

£t{p) = {l-Px-Py- Pz)p + PxXpX + PyYpY + p^ZpZ, 

where Px = Py = {1 — e~*/^i)/4 andpz = 1/2 — p^ — |e~*/^^. In particular, 

r) 1 _ ptm(i-Ti/T2) 

^-1 + 2 ' ' ^ . 

Px eVT-i - 1 

Ift^Ti, then we can approximate this ratio as 2T1/T2 — 1. 

Proof. The Kraus operator decomposition [1 14] of £^ is 

2 

£{p) = ^AkpAl (8.2) 

k=0 

Where Ao= [Jyx^];Ai= [J^];A2= and Vl-7-A = e-*/^^M-7 = 

Q-t/Ti We can rewrite the Kraus operators Ai as 

° 2 2' 

A^ = ^I-^Z, A, = y^X-^Y. 
2 2 ' 2 2i 
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Rewriting £{p) in terms of Pauli matrices yields 

P( \ 2 - 7 + 2V1- A-7 7 7 

2-7-2Vl-A-7 ^ 7 
+ 4 ZpZ 

It follows that the Pauli-twirl channel £t is of the claimed form, see [45, Lemma 2]. Com- 
puting the ratio Pz/Px we get 

p^ _ 2-7-2Vl-A-7 _ l + e-*/^^ - 2e-*/^^ 

-t/Ti _ g-«/72 ]^ _ gt/Ti-t/T2 

= 1 + 2 -.^ — = 1 + 2- 



1 + 2- 



1 - e-*/^i e*/^i - 1 

1 _ eVTi(l-Ti/T2) 



If i <^ Ti, then we can approximate the ratio as 2T1/T2 — 1, as claimed. □ 

Thus, an asymmetry in the 71 and T2 times does translate to an asymmetry in the 
occurrence of bit flip and phase flip errors. Note that Px = Py indicating that the Y errors 
are as unlikely as the X errors. We shall refer to the ratio Pz/Px as the channel asymmetry 
and denote this parameter by A. 

Asymmetric quantum codes use the fact that the phase flip errors are much more likely 
than the bit flip errors or the combined bit-phase flip errors. Therefore the code has different 
error correcting capability for handling different type of errors. We require the code to 
correct many phase flip errors but it is not required to handle the same number of bit flip 
errors. If we assume a CSS code [35], then we can meaningfully speak of X-distance and 
Z-distance. A CSS stabilizer code that can detect all X errors up to weight — 1 is said 
to have an X-distance of dx. Similarly if it can detect all Z errors upto weight dz — 1, 
then it is said to have a Z-distance of dz- We shall denote such a code by [[n, k, dx/dz]]q 
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to indicate it is an asymmetric code, see also [145] who was the first to use a notation 
that allowed to distinguish between X- and Z-distances. We could also view this code as 
an [[n, k, minjcij., d^Y^q stabilizer code. Further extension of these metrics to an additive 
non-CSS code is an interesting problem, but we will not go into the details here. 

Recall that in the CSS construction a pair of codes are used, one for correcting the bit 
flip errors and the other for correcting the phase flip errors. Our choice of these codes will 
be such that the code for correcting the phase flip errors has a larger distance than the code 
for correcting the bit flip errors. We restate the CSS construction in a form convenient for 
asymmetric stabilizer codes. 

Lemma VIII.2 (CSS Construction [35]). Let Cx, Cz be linear codes over with the pa- 
rameters [n, k:^q, and [n, k^q respectively. Let C Cz- Then there exists an [[n, kx+kz — 
n, dx/dzWq asymmetric quantum code, where dx — wt{Cx \ C^) and dz — wt{Cz \ C^). 

If in the above construction dx — wt{Cx) and dz — wt{Cz), then we say that the code 
is pure. 

In the theorem above and elsewhere in this paper ¥q denotes a finite field with q ele- 
ments. We also denote a q-ary narrow-sense primitive BCH code of length n — q^ — 1 and 
design distance S as BCH (5). 

B. Asymmetric Quantum Codes from LDPC Codes 

In [77], loffe and Mezard used a combination of BCH and LDPC codes to construct asym- 
metric codes. The intuition being that the stronger LDPC code should be used for correct- 
ing the phase flip errors and the BCH code can be used for the infrequent bit flips. This 
essentially reduces to finding a good LDPC code such that the dual of the LDPC code is 
contained in the BCH code. They solve this problem by randomly choosing codewords in 
the BCH code which are of low weight (so that they can be used for the parity check ma- 
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trix of the LDPC code). However, this method leaves open how good the resulting LDPC 
code is. For instance, the degree profiles of the resulting code are not regular and there is 
little control over the final degree profiles of the code. Furthermore, it is not apparent what 
ensemble or degree profiles one will use to analyze the code. 

We propose an alternate scheme that uses LDPC codes to construct asymmetric stabi- 
lizer codes. We propose two families of quantum codes based on LDPC codes. In the first 
case we use LDPC codes for both the X and Z channel while in the second construction we 
will use a combination of BCH and LDPC codes. But first, we will need the following facts 
about generalized Reed-MuUer codes, ( [80]) and finite geometry LDPC codes, ( [98, 150]). 

1. Finite Geometry LDPC Codes 

Let us denote by EG(m, p*) the Euclidean finite geometry over ¥ps consisting of p^^ points. 
For our purposes it suffices to use the fact that this geometry is equivalent to the vector 
space F™. A /i-dimensional subspace of F™ or its coset is called a /i-flaL Assume that 
< Hi < ijL2 < TTi. Then we denote by A^eg(a*2, A*i, s,p) the number of /ii-flats in a /X2-flat 
and by AEcim, //2, A*i, s,p), the number of //2-flats that contain a given //i-flat. These are 
given by (see [150]) 

i=l ^ 

i=/ii+l ^ 

where q — p*. Index all the /Xi-flats from i = 1 to n = A^eg(^, A*i, s,p) as Fj. Let F be a 
//2-flat in EG(m,p*). Then we can associate an incidence vector to F with respect to the 
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111 flats as follows. 

ij — 1 if Fj is contained in F I 
ij — otherwise. I 

Index the //2-flats from j = 1 to J = A^eg("^, A*2, Construct the J x n matrix 

H^Q{m, iJ,2, A*i, s,p) whose rows are the incidence vectors of all the /X2-flats with respect 
to the /^i-flats. This matrix is also referred to as the incidence matrix. Then the type-I 
Euclidean geometry code from //2-flats and /xi-flats is defined to be the null space, i. e., 
Euclidean dual code) of the Fp-linear span of H^Q{m, iJ,2, iii,s,p). This is denoted as 
CiG{m,ii2,l^i,s,p). Let H^(}{m, 112,1^1, s,p) = i7^J](m, /^a, A^i, The type-Il Eu- 

clidean geometry code Cg^ (m, //2 , A*i , s, p) is defined as the null space of H^^ (m, //2 , A*i , s, p) . 
Let us now consider the /X2-flats and /^i-flats that do not contain the origin of EG(m,p*). 
Now form the incidence matrix of the /i2-flats with respect to the /^i-flats not containing 
the origin. The null space of this incidence matrix gives us a quasi-cyclic code in general, 
which we denote by CgQ^(m, /X2, A*i, s,p), see [150]. 

2. Generalized Reed-MuUer Codes 

Let a be a primitive element in F^m. The cyclic generalized Reed-MuUer code of length 
— 1 and order v is defined as the cyclic code with the generator polynomial whose roots 
satisfy < j < m{q — 1) — u — 1. The generalized Reed-MuUer code is the singly 

extended code of length q'^. It is denoted as GRMq{iy, m). The dual of a GRM code is also 

a GRM code [17, 31, 80]. It is known that 

GRMg(i/, m)^ = GRMg(t/^, m), (8.6) 

where i/-*- = m{q — 1) — 1 — v. 

Let C be a linear code over F^^. Then we define CIf,, the subGeld subcode of C over 
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as the codewords of C which are entirely in F" (see [76, pages 116-120]). Formally 



this can be expressed as 




{c e C I c e F^}. 



(8.7) 



Let C C F" . The the trace code of C over F^ is defined as 



= I c e C}. 



(8.8) 



There are interesting relations between the trace code and the subfield subcode. One of 
which is the following result which we will need later. 

Lemma VIII.3. Let C C F*^,. Then C|Fg, the subfield subcode of C is contained in 



Proof. Let c e CIf, Q F^ and a e F^i. Then trg(/q(Q;c) = ciYqiiq{a) as c e F^. Since 
trace is a surjective form, there exists some a e F^;, such that iXqi /^(q;) — 1. This implies 
that c e iXqiiq{C). Since c is an arbitrary element in CIf^ it follows that CIf^ Q trg!/q(C). 



Let q = p^, then the Euclidean geometry code of order r over EG(m, p^) is defined as 
the dual of the subfield subcode of GRM.q{{q — l){m — r — l),m), [31, page 448]. The type- 
I LDPC code C^J] (m, /i, 0, s.p) code is an Euclidean geometry code of order — 1 over 
EG(m,p*), see [150]. Hence its dual is the subfield subcode of GRMg((g — l)(m — /x), m) 
code. In other words. 



tiqi /q{C), the trace code ofC. In other words 



C\^,QlXql/q{C). 



□ 



C^J](m,//,0,s,p)^ = GRMq{{q - l)(m - ii),m)W 



(8.9) 
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Further, Delsarte's theorem [48] tells us that 

CiG{m,n,0,s,p) = GRMq{{q-l){m- n),m)\f^, 

= tr,/p(GRM,((g-l)(m-/x),m)^) 
= tr,/p(GRM,(//(g-l)-l,m)). 

Hence, Cg^ (m, 0, s, p) code can also be related to GRMg(//(g — 1) — 1, m) as 

C^^{m,fx,0,s,p) = tr,/p(GRM,(/x(? - 1) - l),m). (8.10) 

3. New Families of Asymmetric Quantum Codes 

With the previous preparation we are now ready to construct asymmetric quantum codes 
from finite geometry LDPC codes. 

Theorem VIII.4 (Asymmetric EG LDPC Codes). Let p be a prime, with q = p^ and 
s > l,m > 2. Let 1 < < m and m — fiz + ^ ^ IJ'x < Then there exists an 

[[p'"^A;, + A;,-p'"^4M]]p 

asymmetric EG LDPC code, where 

= dimC^Q^(m,/x^,0,s,p); = dimC^Q^(m, /x^, 0, 

For the distances dx > AEoim, iix, A^i ~ 1) Sjp) + 1 and dz > AEoim, /iz, l^'z ~ ^, s,p) + 1 
hold. 

Proof. Let — CgQ(m, /x^, 0, s,p). Then from equation (8.10) we have 

Cz = tTg/p{GRMq{nz{q - 1) - 1, m). 
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By Lemma Vin.3 we know that 

C, D GRM,(//,(?-l)-l,m)|F„ 

C, D GRMg{{q-l){m-{m-ii, + l)),m)\w„ 

where the last inclusion follows from the nesting property of the generalized Reed-MuUer 
codes. For any order such that m — /x^ + 1 < //a; < m, let = C'gQ(m, //^, 0, s,p). 
Then Cx is an LDPC code whose dual — GRMg((g — l)(m — //a;), m)|Fp is contained 
in Cz- Thus we can use Lemma V111.2 to form an asymmetric code with the parameters 

[b™^^x + ^.-p'"^4/4]]p 

The distance of Cz and Cx are at lower bounded as dx > ^eg(^, I^x, I^x — s,p) + 1 and 
dz > A^{m, Hz, IJ.Z - l,s,p) + 1 (see [150]). □ 

In the construction just proposed, we should choose to be a stronger code compared 
to Cx. We have given the construction over a nonbinary alphabet even though the case p — 2 
might be of particular interest. 

We briefly turn our attention back to the depolarizing channel. The LDPC codes de- 
signed for the asymmetric channels will not in general perform well on the depolarizing 
channel. In fact constructing good quantum LDPC codes for the depolarizing channel re- 
mains a difficult problem and a satisfactory solution is yet to be advanced. We contribute 
to the ongoing discussion in this topic by drawing upon the finite geometry LDPC codes as 
we did for the asymmetric codes. The codes presented in Theorem Vin.4 can under certain 
conditions lead to LDPC codes that are suitable for use on the depolarizing channel. 

Corollary VIII.5 (EG LDPC Codes for Depolaring Channel). Let p be a prime, with q = 
p^ and s > l,m > 2. Let \{m + l)/2] < /i < m. Then there exists an [[p"^^,2k — 
p^^, symmetric EG LDPC code, where k — dim CgQ(m, /x, 0, s,p). For the distance 
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d > AEGiin, II, II — 1, s,p) + 1 holds. 

Our next construction makes use of the cyclic finite geometry codes. Our goal will be 
to find a small BCH code whose dual is contained in a cyclic Euclidean geometry LDPC 
code. For solving this problem we need to know the cyclic structure of C^Q^^{m, ii, 0, s, p). 
Let q; be a primitive element in Wpma. Then the roots of the generator polynomial of 
C^Q^^{m, n, 0, s,p) are given by [79, Theorem 6], see also [81, 104]. Now, 

Z ^{a^\0< max Wps{hp^) < {p' - l)(m - ii)}, 

0<l<s 

where Wq{h) is the q'-ary weight of h — ho + hiq + • • • + hkq^~^, i. e., Wq{h) = Yl, hi. 
The finite geometry code C^Q^cim, n, 0, s,p) is actually an {n — l,p^) Euclidean geometry 
code. The roots of the generator polynomial of the dual code are given by 

= {a'' I min Wps{hp^) < ii{p' - 1)}. 

0<l<s 

In fact, the dual code is the even-like subcode of a primitive polynomial code of length 
pms _ ^ Qygj. order m — ii, whose generator polynomial, by [81, Theorem 6], has 

the roots 

Z = {a'^ I < min Wps{hp^) < ii{p' - 1)}. 

0<l<s 

Thus Z-^ = Zp[J{0}. Now by [81, Theorem 11], Zj, and therefore Z-*- contain the sequence 
of consecutive roots, a, a^, . . . , a^°~^, where 5o — {R + l)p^^ — 1 and m(p* — 1) — (m — 
n){p^ — l) — Q{p^ — 1)+R. Simplifying, we see that R — and Q — pt giving 6o — p^^ — 1. 
It follows that 

Ceg,cK/^,0,s,p)^ = GRM,(m,(g-l)(m-/x))|F, 
c BCn{5o). 

Thus we have solved the problem of construction of the asymmetric stabilizer codes in 



183 



a dual fashion to that of [77]. Instead of finding an LDPC code whose parity check matrix 
is contained in a given BCH code, we have found a BCH code whose parity check matrix 
is contained in a given finite geometry LDPC code. This gives us the following result. 

Theorem VIII.6 (Asymmetric BCH-LDPC stabilizer codes). Let = Ceg,c(^' A*' 0' ^i P) 
and 5 <5o^p'^' -I. Letn^ p"^' - 1 and = BCn{5) C F^. Then there exists an 

[[n, h + h- n, 4/4]]p 

asymmetric stabilizer code where > A^qItti, /i, /i — 1, s,p), > 5 and — dimC^, 
kz — dim C^. 

Perhaps an example will be helpful at this juncture. 

Example VIII.7. Let m — s — p — 2 and ji — l. Then Ceg,c(2, 1, 0, 2, 2) is a cyclic code 
whose generator polynomial has roots given by 

Z = {«^|0 < max Vr22(2'/i) < (m - - 1) = 3} 
= {a^, a^, a^, a^, a^, a^, a^, a^^}. 

As there are 4 consecutive roots and \Z\ — 8, it defines a [15, 7, > 5] code. The roots of the 
generator polynomial of the dual code are given by 

= {a'^lO < min W22{2^h) < ii(p' - 1) = (2^ - 1)} 

= {q!°, a^, Q!^, a'', a^, a®, Q!^°}. 

We see that has two consecutive roots excluding 1, therefore the dual code is contained 
in a narrowsense BCH code with design distance 3. Note that p^^ — 1 = 3. Thus we can 
choose Cx — BCTi.{3) and = Ceg,c(2) 1) 0, 2, 2) and apply Lemma VIII.2 to construct a 
[[15, 3, 3/5]]2 asymmetric code. 
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We can also state the above construction as in [77], that is given a primitive BCH 
code of design distance 5, find an LDPC code whose dual is contained in it. It must be 
pointed out that in case of asymmetric codes derived from LDPC codes, the asymmetry 
factor dx/ dz is not as indicative of the code performance as in the case of bounded distance 
decoders. For m = p = 2, we can derive explicit relations for the parameters of the codes. 

Corollary VIII.8. Let C = C^J],c(2, 1, 0, s, 2) and 5 ^ 2t + I - 1. Then there exists 
an 

[[22. _ 1^ - 3^ - s{5 - 1), 5/2' + 1]]2 
asymmetric stabilizer code. 

Proof. The parameters of C are [2^* - 1, 2^^ - 3^ 2' + Ija, see [104]. Since is contained 
in a BCH code of length 2^* — 1 whose design distance 5 < 2^* — 1, we can compute the 
dimension of the BCH code as 2^^ - 1 - s{5 - 1), see [107, Corollary 8]. By Lemma Vin.2 
the quantum code has the dimension 2^* — 3* — s{5 — 1). □ 

Example VIII.9. For m—p — 2 and s — Awe can obtain a [255, 175, 17] LDPC code. We 

can choose any BCH code with design distance 5 < 2'^ — ! = 15 to construct an asymmetric 
code. Table III lists possible codes. 

C. Performance Results 

We now study the performance of the codes constructed in the previous section. We 
assume that the overall probability of error in the channel is given by p, while the indi- 
vidual probabilities of X, Y, and Z errors are Px = p/{A + 2), py = p/{A + 2) and 
Pz — pAj {A + 2) respectively. The exact performance would require us to simulate a 4-ary 
channel and also account for the fact that some errors can be estimated modulo the stabi- 
lizer. However, we do not account for this and in that sense these results provide an upper 
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Table III. Asymmetric BCH-LDPC stabilizer codes 



s 


6 


Code 


Asymmetry 


Rate 






[[n, /c,4/4]]2 


dz/dx 




4 


15 


[[255, 119, 15/17]]2 


^ 1 


0.467 


4 


13 


[[255, 127, 13/17]]2 


« 1.25 


0.498 


4 


11 


[[255, 135, 11/17]]2 


« 1.5 


0.529 


4 


9 


[[255,143,9/17]]2 


~ 9 


0.561 


4 


7 


[[255,151,7/17]]2 


~ 2.5 


0.592 


4 


5 


[[255,159,5/17]]2 


f-^ 3 


0.624 


4 


3 


[[255,167, 3/17]]2 


Ri 6 


0.655 



bound on the actual error rates. The 4-ary channel can be modeled as two binary sym- 
metric channels - one modeling the bit flip channel and the other the phase flip channel. 
For exact performance, these two channels should be dependent, however, a good approx- 
imation is to model the channel as two independent BSCs with cross over probabilities 
Px+Py — 2p/ {A + 2) and Py+Pz— p{A + l)/{A + 2).la this case the overall error rate 
in the quantum channel is the sum of the error rates in the two BSCs. While this approach 
is going to slightly overestimate the error rates, nonetheless it is useful and has been used 
before [105]. Since the X-channel uses a BCH code and decoded using a bounded distance 
decoder, we can just compute the X error rate, in closed form. The error rate in the Z 
channel, is obtained through simulations. The overall error rate is 

Pe^i-{i-p:){i-p:)^p:+p:- p: p: « p: + p: . 

Decoding LDPC Codes. The LDPC code was decoded using the an algorithm similar to 
the hard decision bit flipping algorithm given in [98]. This is an instance of the bit flipping 
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algorithm originally given by Gallager. The maximum number of iterations for decoding 
is set to 50. A small modification had to be made to accommodate the special situation 
of quantum syndrome decoding. By measuring the generators of the stabilizer group, we 
obtain a classical syndrome, which due to the fact that only ±1 eigenspaces occur in all 
of the generators, is hard information. We use the syndrome as shown in Figure 9 and 
initialize all the bit nodes with at the start of the algorithm. Then the algorithm proceeds 
in the usual fashion as in [98]. We implemented this algorithm and ran several simulations 
which are described next. 

In figure 10 we see the performance of [[255, 159, 5/17]] as the channel asymmetry is 
varied from 1 to 100. We see that as we increase the asymmetry the code starts to perform 
better. As the asymmetry is increased eventually the performance of the quantum code 
approaches the performance of the classical LDPC code. 

Tolerating a little rate loss improves the performance as can be seen from figure 11. 
If we increase the distance of the BCH code the code becomes more tolerant to variations 
in channel asymmetry as can be seen by the performance of [[255, 143, 9/17]] in figure 12. 
This plot also illustrates an important point. Our channel model assumes that as we vary 
the channel asymmetry we keep the total probability of error in the channel fixed. This 
implies that while the probability of X errors goes down, the probability of Z errors tends 
to p, the total probability of error. Hence, the reduction in error rate in the X channel must 
more than compensate for the increase in Z error rate. If on the other hand, we had fixed 
the probability of error in the Z channel and varied the channel asymmetry then we would 
observe a monotonic improvement in the error rate because on one hand the Z error rate 
does not change but the X error rate does. We note that with larger lengths we can get an 
even steep drop in the error rate as is apparent from the performance of [[1023, 731, 11/33]] 
code shown in Figure 13. 

The question naturally raises how do these codes compare with the codes proposed 
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in [77]. Strictly speaking both constructions have regimes where they can perform better 
than the other. But it appears that the algebraically constructed asymmetric codes have the 
following benefits with respect to the randomly constructed ones of [77]. 

• They give comparable performance and higher data rates with shorter lengths. 

• The benefits of classical algebraic LDPC codes are inherited, giving for instance lower 
error floors compared to the random constructions. 

• The code construction is systematic. 

Our codes also offer flexibility in the rate and performance of the code because we can 
choose many possible BCH codes for a given finite geometry LDPC code or vice versa. 
The flip side however is that the codes given here have higher complexity of decoding. 
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all zeros goes here < 




©^1 



0^3 



> syndrome goes here 



Fig. 9. Modification of the iterative message passing algorithm to the quantum case. The 
initialization step is different from the classical case as no soft information from the 
channel is available but rather only hard information about the measured syndrome 
is available. The algorithms begins with initializing all bit nodes to and the check 
nodes with the syndrome. From then on, any classically known method for iterative 
decoding can be applied. In the figure this principle is shown for the example of a 
classical [7,4,3] Hamming code. Application to the quantum case is straightforward 
as the decoding algorithm only works with classical information to compute the most 
likely error. 
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- A=1 

- A=10 

- A=100 
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X: 0.01292 
Y: 0.0001121 



Probability of error in tlie channel 



Fig. 10. Performance of a [[255,159,5/17]] code described in the text for choices 
A = 1, 10, 100 of the channel asymmetry. 




Probability of error in tfie ctiannel 



Fig. 11. Performance of a [[255,151,7/17]] code described in the text for choices 
A = 1, 10, 100 of the channel asymmetry. 
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Probability of error in the ctiannei 



Fig. 12. Performance of a [[255,143,9/17]] code described in the text for choices 
A = 1, 10, 100 of the channel asymmetry. 



10 Q . O . O — -0- 



10^' 




10"' 

Probability of error in the channel 



Fig. 13. Performance of [[1023, 731, 11/33]] code for A = 100. 



191 



CHAPTER IX 

NEW RESULTS ON BCH CODES* 
The Bose-Chaudhuri-Hocquenghem (BCH) codes [32, 33, 58, 75] are a well-studied class 
of cyclic codes that have found numerous applications in classical and more recently in 
quantum information processing. Recall that a cyclic code of length n over a finite field ¥q 
with q elements, and gcd(n, q) — 1, is called a BCH code with designed distance 5 if its 
generator polynomial is of the form 

where = {xq^ mod n|/ceZ, /c>0} denotes the g-ary cyclotomic coset of x mod- 
ulo n, q; is a primitive element of F^m, and m = ordn{q) is the multiplicative order of q 
modulo n. Such a code is called primitive ifn — q^ — 1, and narrow-sense if 6 = 1. 

An attractive feature of a (narrow-sense) BCH code is that one can derive many struc- 
tural properties of the code from the knowledge of the parameters n, q, and S alone. Perhaps 
the most well-known facts are that such a code has minimum distance d > S and dimen- 
sion k > n — {S — l)ordn{q). In this chapter, we will show that a necessary condition for 
a narrow-sense BCH code which contains its Euclidean dual code is that its designed dis- 
tance 6 — 0{qv}/'^). We also derive a sufficient condition for dual containing BCH codes. 
Moreover, if the codes are primitive, these conditions are same. These results allow us to 
derive families of quantum stabilizer codes. Along the way, we find new results concerning 
the minimum distance and dimension of classical BCH codes. 

To put our results into context, we give a brief overview of related work. This chapter 

*(c)2007 IEEE. Reprinted with permission from S. A. Aly, A. Klappenecker and P. K. 
Sarvepalli, "On quantum and classical BCH codes". IEEE Trans. Inform. Theory, vol 53, 
no. 3, pp. 1183-1188,2007. 
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was motivated by problems concerning quantum BCH codes; specifically, our goal was 
to derive the parameters of the quantum codes as a function of the design parameters. 
Examples of certain binary quantum BCH codes have been given by many authors, see, for 
example, [35, 68, 69, 145]. Steane [146] gave a simple criterion to decide when a binary 
narrow-sense primitive BCH code contains its dual, given the design distance and the length 
of the code. We generalize Steane's result in various ways, in particular, to narrow-sense 
(not necessarily primitive) BCH codes over arbitrary finite fields with respect to Euclidean 
and Hermitian duality. These results allow one to derive quantum BCH codes; however, it 
remains to determine the dimension, purity, and minimum distance of such quantum codes. 

The dimension of a classical BCH code can be bounded by many different standard 
methods, see [24, 76, 107] and the references therein. An upper bound on the dimension 
was given by Shparlinski [143], see also [97, Chapter 17]. More recently, the dimension 
of primitive narrow-sense BCH codes of designed distance 6 < g'T"*/^! + 1 was apparently 
determined by Yue and Hu [156], according to reference [155]. We generalize their result 
and determine the dimension of narrow-sense BCH codes that are not necessarily primitive 
for a certain range of designed distances. As desired, this result allows us to explicitly 
obtain the dimension of the quantum codes without computation of cyclotomic cosets. 

The purity and minimum distance of a quantum BCH code depend on the minimum 
distance and dual distance of the associated classical code. In general, it is a difficult 
problem to determine the true minimum distance of BCH codes, see [38]. A lower bound 
on the dual distance can be given by the Carlitz-Uchiyama-type bounds when the number 
of field elements is prime, see, for example, [107, page 280] and [149]. Many authors 
have determined the true minimum distance of BCH codes in special cases, see, for in- 
stance, [118], [155]. 

This chapter also extends our previous work on primitive narrow-sense BCH codes [4], 
simplifies some of the proofs and generalizes many of the results to the nonprimitive case. 
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Notation. We denote the ring of integers by Z and the finite field with q elements by 
Fq. We use the bracket notation of Iverson and Knuth that associates to [statement] the 
value 1 if statement is true, and otherwise. For instance, we have [k even] = k — 1 mod 2 
and [k odd] = k mod 2 for an integer k. The Euclidean dual code C-*- of a code C C is 
given by = {t/ e I a; ■ 1/ = for all x e C}, while the Hermitian dual of C C F^2 
is defined as C-^'^ = e F^2 \y'^ ■ x — for all x e C}. We denote a narrow-sense 
BCH code of length n over F^ with designed distance 5 by BCH(n, g; 5), and we omit the 
parameter q if the finite field is clear from the context. 

A. Euclidean Dual Codes 

Recall that one can construct quantum stabilizer codes using classical codes that contain 
their duals. In this section, our goal is to find such classical codes. Steane showed that a 
primitive, narrow-sense, binary BCH code of length 2"* — 1 contains its dual if and only 
if its designed distance 5 satisfies 5 < 2r"*/2l — 1, see [146]. We generalize this result in 
various ways. 

Lemma IX.l. Let C bea cyclic code of length n over the finite field F^ such that gcd(n, q) — 
1, and let Z be the defining set of C. The code C contains its Euclidean dual code if and 
only if Z n Z~^ = 0, where Z~^ denotes the set Z~^ = {~z mod n \ z & Z}. 

Proof See [70, Theorem 2]. See also [76, Theorem 4.4. 11]. □ 

Let us first consider narrow-sense BCH codes of length n such that the multiplicative 
order of q modulo n equals 1 ; for example, Reed-Solomon codes belong to this class of 
codes. We can avoid some special cases in our subsequent arguments by treating this case 
separately. Furthermore, the next lemma nicely illustrates the proof technique that will be 
used throughout this section, so it can serve as a warm-up exercise. 
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Lemma IX.2. Suppose that q is a power of a prime and n is a positive integer such that 
q = 1 mod n. We have BCH(n, q; S)^ C BCH(n, q; 6) if and only if the designed distance 
5 is in the range 2 < S < (Jmax = [{n + 1)/2J. 

Proof The defining set Z of BCH(n, q; 6) is given by Z = (1, . . . , 5 — 1}, since q has 
multiplicative order 1 modulo n, and therefore all cyclotomic cosets are singleton sets. If 
BCH(n, g; 5)^ C BCH(n,g;5), then by Lemma IX.l, Z n 0. If x e Z, then 

n — X ^ Z and n — x > x; hence, ^max < [{n + 1)/2J. Conversely, if 5 < [{n + 1)/2J, 
then min Z~^ = min{n - 1, . . . ,n - 5 + 1} = n - 5 + 1 > n- [(n + l)/2j +1 = 
\(n + l)/2] > 5max; hence, Z n Z'^ = and Lemma IX.l implies that BCH(n, q; 5)-^ C 
BCR{n,q;6). □ 

If the multiplicative order m of g modulo n is larger than 1, then the defining set of 
the code has a more intricate structure, so proofs become more involved. The next theorem 
gives a sufficient condition on the designed distances for which the dual code of a narrow- 
sense BCH code is self-orthogonal. 

Theorem IX.3. Suppose that m — ordn{q). If the designed distance 5 is in the range 

2 < 6 < 5max = where 

= ^^(^^"^'^ - 1 - (g - 2)[m odd]), (9.1) 
then BCH(n, q; 6)^ C BCH(n, q; S). 

Proof. It suffices to show that BCH(n, q; 5max)^ ^ BCH(n, q; (5max) holds, since BCH(n, q; S) 
contains BCH(n, q; Smax), and the claim follows from these two facts. 

Seeking a contradiction, we assume that BCH(n, q; 6max) does not contain its dual. 
Let Z = Ci U ■ ■ • U Cs^^^-i be the defining set of BCH(n, q; ^max)- By Lemma IX.l, 
Z n Z~^ ^ 0, which means that there exist two elements x, y e {1, . . . , ^max — 1} such that 
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y = —xq^ mod n for some j e {0, 1, . . . , m — 1}, where m is the multiplicative order of 
q modulo n. Since gcd(g, n) = 1 and q^ = 1 mod n, we also have x = —yq^~^ mod n. 
Thus, exchanging x and y if necessary, we can even assume that j is in the range < j < 
[m/2j . It follows from (9.1) that 



I < xq' < {5^^ - l)q' 
n 

Q 

< n, 



for all j in the range < j < [m/2\. Since 1 < xq^ < n and 1 < y < n, we can infer 
from y = —xq^ mod n that y — n — xq^ . But this implies 



y > n-xgL"^/'J 

^ ^- ~ ^^""^'^ ~ ^^"''''^ ~ 2)[m odd]) + gLW2j 

_!L_(gLm/2j _ ^ ^Lm/2J _ 2)[,„ odd]) 



+gLm/2j 



contradicting the fact that y < S^ax- □ 

Now we will derive a necessary condition on the design distance of narrow-sense, 
nonprimitive BCH codes that contain their duals. 

Theorem IX.4. Suppose that m = ordn{q). If the designed distance 6 exceeds (5max = 
[gn^^j^ BCH(n, q; 6)^ % BCH(n, g; b). 

Proof. Let n = no + n\q H V nd-iq'^~^, where < Ui < q — 1 and S > 5max + 1- Then 
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the defining set Z D {1, . . . , [gn^/^J }. We will show that Z n V 0- Let, 

i=[d/2j 

i=[d/2j 

Since q''^"^ <n<q^, we have g(<^+^)/2 < gn^/^ < If is even then [ci/2] < (d + 

l)/2andifdisodd,then [(i/2] < (d+l)/2. Hence we have s < g^ti/si < ^(d+i)/2 < ^^i/2_ 
Therefore s e Z. Now consider, 

i=0 i=[(i/2j 

K2-1J 

= ^ n^g^ < gL'«/2J 

i=0 

< g^'^+i)/^ < gnV2. 

Hence s' e Z and by definition s' e Z~^, which implies Z n ^ 0; by Lemma IX. 1 it 
follows that BCH(n, g; 5)^ % BCH(n, g; 5). □ 

The condition we just derived can be strengthened under some restrictions. Especially, 
if the constant k in equation (9.1) is integral, then we can derive a necessary and sufficient 

condition as shown below: 

Theorem IX.5. We keep the notation of Theorem IX.4. Suppose that k is integral, and that 
m>2. We have BCH(n, g; 5)-^ C BCH(n, g; 5) if and only if the designed distance 6 is in 
the range 2 < 5 < S^ax — i^- 

Proof. Suppose that BCH(n, g; 5)-^ C BCH(n, g; 5). Seeking a contradiction, we assume 
that 5 > ^max; thus, (^max IS Contained in the defining set Z of BCH(n, g; 5). If m is even. 
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then 



Lm/2J 




n 



= s, 



q[m/2\ _|_ I 

W (mod n), 



q[m/2\ _|_ I 



hence, ^max ^ Z D Z ^ 7^ 0. If m is odd, then 



Lm/2J 




P)\ definition, s e Z ^; furthermore, s < 5max> so s e Z n Z ^ 7^ 0. In both cases, m even 
and odd, we found that Z n is not empty, so BCH(n, q; S) cannot contain its Euclidean 



As a consequence of Theorem IX.5 we have the following test for primitive narrow- 
sense BCH codes that contain their duals. 

Corollary IX.6. A primitive narrow-sense BCH code of length n = q"^ — 1, m > 2, over 
the finite field ¥q contains its Euclidean dual code if and only if its designed distance S 
satisfies 



We observe that a narrow-sense BCH code containing its Euclidean dual code must 
have a small designed distance (6 = 0{^/n)), when the multiplicative order of q modulo 
n is greater than one. This raises the question whether one can allow larger designed 
distances by considering non-narrow-sense BCH codes. Our next result shows that this is 
not possible, at least in the case of primitive codes. 

Theorem IX.7. Let C be a primitive (not necessarily narrow-sense) BCH code of length 



dual code, contradiction. The converse follows from Theorem IX.3. 



□ 



2 < 5 < 5max = q 



rm/21 _i_(^_2)[modd]. 
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n — — 1 over ¥q with designed distance 5.1fm> 1 and 5 exceeds 

{q""/^ - 1, m = mod 2, 

2(^(m+i)/2 _ g + 1)^ rn = l mod 2, 

C cannot contain its Euclidean dual. 

Proof. Let the defining set of C be Z = U Cb+i U • • • U C6+5_2. We will show that if 
S > 5max then Z n Z- V 0. If e Z, then e so Z n 0. Therefore, we can 

henceforth assume that ^ Z, which implies 6 > 1 and b + 6 — 2 < n. 

1. Suppose that m is even; thus, Smax — — 1- If > (^max then the defining set Z 
contains an element of the form s = aS^nax for some integer a. However, 

= s (mod n). 

Hence, s e Z n Z'^ 

2. Suppose that m > 1 is odd; thus, 5max = 2g(™+^)/2 - 2g + 2. If 5 > ^^ax then 
there exists an integer a such that two multiples of S' — (5niax/2 are contained in the 
range b < {a — 1)S' < aS' < b + S — 2. Since b > 1 and aS' < n, it follows that 

The defining set Z of the code contains the element s — aS'. The number s' — 

Q,(^(m+i)/2 _ ^(m-i)/2 _ ^j^g ^^^^^ < s' < s and satisfies -^^{"^-^/s = 

s' mod n, so s' G Z~^. 

Suppose that 6 < s'. Then s' e Z, which impUes Z n Z'^ ^ 0. 
Suppose that s' < b. Since 6 < (a — 1)6', we obtain the inequality s' < {a — 1)5'; 
solving for a shows that a > q; thus, g < a < Let t' = (a — _ 

1) + g("^~^)/2 — 1; it is easy to check that t' is in the range {a — 1)5' < t' < a5' when 
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a > q; thus, t' e Z. Further, lett — s — {a — q + 1); since t > s — S',we have t e Z 
as well. Since -tq^"'~^'^/'^ = t' mod n, we can conclude that t' e Z n Z~^ ^ 0. 

Therefore, we can conclude that if the designed distance of C is greater than S^ax, then 
Z n Z~^ 7^ 0, which proves the claim thanks to Lemma IX. 1. □ 

B. Dimension and Minimum Distance 

While the results in the previous section are sufficient to tell us when we can construct 
quantum BCH codes, they are still unsatisfactory because we do not know the dimension 
of these codes. To this end, we determine the dimension of narrow-sense BCH codes of 
length n with minimum distance d — 0(n^/^). It turns out that these results on dimension 
also allow us to sharpen the estimates of the true distance of some BCH codes. 

First, we make some simple observations about cyclotomic cosets that are essential in 
our proof. 

Lemma IX.8. Let nbe a positive integer and qbe a power of a prime such that gcd(n, q) = 
1 andq^'^f'^^ < n < q^ — 1, where m — ordn{q)- The cyclotomic coset Cx — {xq^ mod n \ 
< j < m} has cardinality mfor all x in the range l<x< ng^Wsi /(^m _ ly 

Proof. If m = 1, then \Cx\ — 1 for all x and the statement is trivially true. Therefore, we 
can assume that m > 1. Seeking a contradiction, we suppose that \Cx\ < m, meaning that 

there exists a divisor j of m such that xq^ = x mod n, or, equivalently, that x{q^ — 1) = 
mod n holds. 

Suppose that m is even. The divisor j of m must be in the range 1 < j < m/2. 

However, x{q^ — 1) < — l)/(g™ — 1) < n; hence x{q^ — 1) ^ mod n, 

contradicting the assumption \Cx\ < m. 

Suppose that m is odd. The divisor j of m must be in the range 1 < j < m/3. Since 

qim+m < q2m/3 f^j. ^ > 3^ we have x{q^ - 1) < nq^^'+^^/^iq"^/^ - l)/{q"' - 1) < 
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^^2m/Z(^^m/z _ iy(^qi^ - 1) < n. Therefore, x{q^ - 1) ^ mod n, contradicting the 
assumption \Cx\ < m. □ 

The following observation tells us when some cyclotomic cosets are disjoint. 

Lemma IX.9. Let n > Ibean integer and qbe a power of a prime such that gcd(n, q) — 1 
and gL™/2j < n < g"^ — 1, where m = ordn{q). Ifx and y are distinct integers in the range 
1 < 2;, y < min{ [ng'^"^/^^ / {q"^ — 1) — — 1} such that x,y ^ mod q, then the q-ary 
cyclotomic cosets ofx and y modulo n are distinct. 

Proof. If m — 1, then clearly — {x}, Cy — {y} and distinct x, y implies that 
and Cy are disjoint. If m > 1, then x,y < [ngl^™/^^ /(g"^ — 1) — Ij < n — 1. The set 
5" — {xq^ mod n, yq^ mod n | < j < lm/2\ } contains 2(Lm/2j + 1) > m + 1 elements, 
since gLW2j x [nq^'^^'^^ / {q'^ — 1) — Ij < n and, thus, no two elements are identified 
modulo n. If we assume that Cx = Cy, then the preceding observation would imply that 
\Cx\ = \Cy\ > \S\ >m + l, which is impossible since the maximal size of a cyclotomic 
coset is m. Hence, the cyclotomic cosets Cx and Cy must be disjoint. □ 

With these results in hand, we can now derive the dimension of narrow-sense BCH 
codes. 

Theorem IX.IO. Let q be a prime power and gcd(n, g) = 1 with ordn{q) — m. Then a 
narrow-sense BCH code of length gL™/2J < n < g"^ - 1 over ¥q with designed distance S 
in the range 2 < 6 < min{ Lng'^"*/^^ / (g'" — 1) J , n} has dimension 

k = n-m\{6 -l){l-l/q)]. (9.2) 

Proof. Let the defining set of BCH(n, g; 5) be Z = Ci U C2 • • • U Cs-i; a union of at most 
S — 1 consecutive cyclotomic cosets. However, when l<x<5 — lisa multiple of g, then 
Cx/q = Cx. Therefore, the number of cosets is reduced by [{S — l)/gj . By Lemma IX.9, if 
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x,y ^0 mod q and x ^ y, then the cosets Cx and Cy are disjoint. Thus, Z is the union of 
(5 — 1) — L((5 — l)/gj = [(5 — 1)(1 — l/g)] distinct cyclotomic cosets. By Lemma IX.8, 
all these cosets have cardinality m. Therefore, the degree of the generator polynomial is 
m [(5 — 1) (1 — 1/g)] , which proves our claim about the dimension of the code. □ 

As a consequence of the dimension result, we can tighten the bounds on the minimum 
distance of narrow-sense BCH codes generalizing a result due to Farr, see [107, p. 259]. 

Corollary IX.ll. A BCH(n, g; 5) code 

i) with length in the range gl-"»/2j n < — 1, m — ordn{q), 

ii) and designed distance in the range 2 < 5 < min 
///) such that 

L(5+1)/2J 

r]{q-iy>qr-\(^-^)(^-^/^)\ (9.3) 

i=0 

has minimum distance d — S or S + 1; if S = mod q, then d — S + 1. 

Proof. Seeking a contradiction, we assume that the minimum distance d of the code sat- 
isfies d > d + 2. We know from Theorem IX. 10 that the dimension of the code is 
k — n — m[(5 — 1)(1 — 1/^)]. If we substitute this value of k into the sphere-packing 
bound q^ E1=o~^^^^^ if) " ^ ^e obtain 

L(5+1)/2J L(<i-1)/2J X X 

E ^ E 

1=0 ^ ^ i=0 ^ ^ 

< qm\{S-l)(l-l/q)-] ^ 

but this contradicts condition (9.3); hence, 6 < d < 6 + 1. 

If 5 = mod q, then the cyclotomic coset Cs is contained in the defining set Z of the 
code because Cs — Cs/q. Thus, the BCH bound implies that the minimum distance must 
be at least S + 1. □ 
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We conclude this section with a minor result on the dual distance of BCH codes which 
will be needed later for determining the purity of quantum codes. 

Lemma IX.12. Suppose that C is a narrow-sense BCH code of length n over ¥q with 
designed distance 2 < 6 < ^max = — 1 — (g — 2)[m odd])/(g'" — 1)J, then the 

dual distance d-^ > S^ax + 1- 

Proof. Let N — {0,1, . . . ,n — 1} and Zs be the defining set of C. We know that Zs^^^ 2 
ZsD {1,...,5 -1}. Therefore N \ Zg^^^ CN\Zs. Further, we know that Z n = 

if 2 < (5 < 5max from Lemma IX. 1 and Theorem IX. 3. Therefore, Z^^^ N \ Zs^^^ C 
N\Zs. 

Let Ts be the defining set of the dual code. Then Ts — {N\ Zs)~^ 2 -^<5max- Moreover 
{0} G N \ Zs and therefore Ts. Thus there are at least (5max consecutive roots in Ts. Thus 
the dual distance d-^ > S^ax + 1- D 

C. Hermitian Dual Codes 

Suppose that C is a linear code of length n over Fq2. Recall that its Hermitian dual code is 

defined by C-^'^ = {y e F^2 | • a; = for all a; e C}, where y'^ = {yf, . . . , y^) denotes 
the conjugate of the vector y — (yi, . . . , 

Lemma IX.13. Assume that gcd(n, q) = 1. A cyclic code of length n over ¥q2 with defining 
set Z contains its Hermitian dual code if and only if Z r[Z~'^ — 0, where Z~'^ — {—Q.^ mod 
n \ z & Z}. 

Proof. Let A?^ = {0, 1, . . . , n — 1}. If g{x) = Ylz^zi^ ~ '^^) generator polynomial 
of a cyclic code C, then h\x) = Y[zeN\zi^ ~ Q?"'^^) is the generator polynomial of C^''. 
Thus, C"'"'' C C if and only if g{x) divides The latter condition is equivalent to 

Z C {—qz \ z E N \ Z}, which can also be expressed as Z fi Z~^ = 0. □ 
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Now similar to Theorem IX. 3 we will derive a sufficient condition for BCH codes that 
contain their Hermitian duals. 

Theorem IX.14. Suppose thatm — ordn{q^). If the designed distance 5 satisfies 2 < 5 < 

^max, where 

<^max = ^-^^{q-+^—^-l-{q'-2)[mcycn]) 
then BCH(n, q^; 5)^>^ C BCH(n, q^- 5). 

Proof. Since BCH(n, g^; 5) contains BCH(n, q^] 5max)> it suffices to show that the relation 
BCH(n, g2; 5^^)^/. c BCH(n, q^; 5^^) holds. 

Seeking a contradiction, we assume that BCH(n, q^] 5max) does not contain its dual. 
Let Z = Ci U C2 U ■ ■ ■ U Cs^^^.i be the defining set of BCH(n, q^] ^^ax) • By Lemma IX. 13, 
Z n ^ 0, which means that there exist two elements x,y e {!,..., (^max — 1} such 
that y — —xq^^^^ mod n for some j e {0, 1, ...,m — 1}, where m — ordn{q). Since 
gcd(g, n) = 1 and g^™ = 1 mod n, we also have y = — mod n, so we can 
assume without loss of generality that j lies in the range < j < [(m — 1)/2J . It follows 
that 



q 

< n 



nq 

2m 



_^^m+[mevenl _ ^ _ ^^2 _ 3^^^ e^gn]) - q^^+^ 



holds for all j in the range < j < [(m — 1)/2J . 

Since 1 < xq^^^^ < n, the congruence y = —xq^^'^^ mod n implies that y — n 
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xg^-^^^ Therefore, y >n - (^max - 1)^'^'-^"* i)/2J+i^ which is equivalent to 



2L(m-l)/2j+l 
"'^ /_.m+[meven] _ 



-{q^ - 2)[m even]) + g2L(m-i)/2j+i_ 



If m is odd, this yields 



Similarly, if m is even, then 



q2m 



^ ' m+1 1 \ I ^"^-1 



Both cases contradict the assumption < y < (5max- Therefore, we can conclude that 
BCH(n, g; (^max) contains its Hermitian dual code. □ 

Arguing as in Theorem IX.4 we can show that a BCH code must have its designed 
distance 5 — 0{q'^n^^'^) if it contains its Hermitian dual. As the arguments are very similar 
we illustrate it for a simpler case as shown below: 

Lemma IX.15. Let C C F^2 be a nonnarrow-sense, nonprimitive BCH code of length 

n = mod + 1, where m = ordn{q^)- If its design distance 5 > ^max = 1^/ (g™ + 1), 
then C cannot contain its Hermitian dual. 

Proof. The defining set Z = Cb U . . . U Cb+s-2 contains {b, . . . ,b + 6 — 2}. If 5 > ^max = 
n/ {q^ + 1), then there exists an element s — a^max £ Z for some positive integer a. Then 
-gs(g2)(™-i)/2 = -anq'^/{q"' + l) = an/(g™ + l) = s mod n. Therefore, ZnZ"^ =^ 0; 
hence, C cannot contain its Hermitian dual code. □ 
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Finally, we conclude this section on Hermitian duals by proving as in the Euclidean 
case nonnarrow-sense BCH codes that contain their Hermitian duals cannot have too large 
design distances. 

Theorem IX.16. Let C C F^2 be a primitive (not necessarily narrow-sense) BCH code of 
length n = g^™ — 1, m = ordn{q), and designed distance S.Ifd exceeds 



then C cannot contain its Hermitian dual code. 

Proof. Suppose that the defining set of C is given by Z = U • • • U C;,+5_2, where 
Cx = {xq^^ mod n | j G Z}, and that 5 > ^max- Seeking a contradiction, we assume that 
C-^f^ C C, which means that ZnZ-i = 0. It follows that 0^ Z, for otherwise e ZHZ''^; 
therefore, 6 > 1 and b + S — 2 < n. 

If m is odd, then there exists an integer a such that b < aSmax < b + 5 — 2. We have 
-gaWg"'"' = Qi(l-g"*)g"^ = Q;(g"^- 1) = a5^^ mod n; thus, a5^^ e ^0^"^ 0- 

If m > 2 is even and S > t^max = 2^"*+^ — 2g^ + 2, then there exists an integer a such 
that two multiples of 5' = (5max / 2 are contained in the range fe < {a — 1)6' < aS' < b+6—2. 
Since b> 1 and a6' < n, it follows that 2 < a < q^~^ (which holds only if m > 2). 

Clearly s ^ a5' e Z. Let s' = -qsq"'"'^ mod n, so s' e then 1 < s' = 

a(qm+i _ ^m-i _ 1) < s for m > 2. 

Suppose that b < s'. Then s' e Z, which implies Z n Z'l ^ 0. 

Suppose that s' < b. Since b < {a — 1)5', we obtain the inequality s' < {a — 1)5'; 
solving for a shows that a > thus, q^ < a < g™^^. Let t' = (a — \){q'^^^ — 1) + 
^(m-i)/2 _ jj. |g g^gy cjjeck that f is in the range {a — 1)5' <t'< a5' when a > q^; 
thus, t' e Z. Further, let i = s — {a — q^ -\- 1); since t > s — 5', we have t e Z as 
well. Since — gtg""^ = f mod n, we can conclude that f e Z fi Z~'^ ^ 0. Hence, by 





if m is odd, 
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Lemma IX. 13 we conclude that C cannot contain its Hermitian dual if its design distance 
exceeds (5max □ 

D. Families of Quantum BCH Codes 

In this section we shall study the construction of (nonbinary) quantum BCH codes. Calder- 
bank, Shor, Rains and Sloane outlined the construction of binary quantum BCH codes 
in [35]. Grassl, Beth and Pellizari developed the theory further by formulating a nice condi- 
tion for determining which BCH codes can be used for constructing quantum codes [68,70]. 
The dimension and the purity of the quantum codes constructed were determined by numer- 
ical computations. Steane simplified it further for the special case of binary narrow-sense 
primitive BCH codes [146] and gave a very simple criterion based on the design distance 
alone. Very little was done with respect to the nonprimitive and nonbinary quantum BCH 
codes. 

In this section we show how the results we have developed in the previous sections 
help us to generalize the previous work on quantum codes and give very simple conditions 
based on design distance alone. Further, we give precisely the dimension and tighten re- 
sults on the purity of the quantum codes. The reader can refer to Chapters III and IV for 
constructions on stabilizer codes. 

Theorem IX.17. Let m — ordn{q) > % where q is a power of a prime and 5i, ^2 are 
integers such that 2 < 5i < ^2 < ^max where 

Sr.^ = ^^{q^""^'^ _ 1 _ - 2)[m odd]), 

then there exists a quantum code with parameters 

[[n,m{52 -5,- [{S^ - l)/q\ + [{S^ - l)/q\), > Sr]], 
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pure to 82. 

Proof. By Theorem IX. 10, there exist BCH codes BCH(n, q; Si) with the parameters [n, n— 

m{5i - 1) +m[{5i - l)/gj, > Si]g for i e {1, 2}. Further, BCH(n, q; 82) C BCH(n, q; 5i). 
Hence by the CSS construction there exists a quantum code with the parameters 

[[n,m{S2 -6,- [{62 - l)/q\ + [{6, - l)/q\), > 6^]],. 

The purity follows due to the fact that 62 > 61 and Lemma IX. 12 by which the dual distance 
of either BCH code is > S^ax + 1 > S2. □ 

When the BCH codes contain their duals, then we can derive the following codes. 
Note that these cannot be obtained as a consequence of Theorem IX. 17. 

Theorem IX.18. Let m — ordn{q) where q is a power of a prime and 2 < 5 < Smax, with 

S^ax = -^W'"^''^ - 1 - (g - 2)[m odd]), 

then there exists a quantum code with parameters 

[[n,n-2m\{d-l){l-l/q)],>S]]g 

pure to Smax + 1 

Proof. Theorems IX. 3 and IX. 10 imply that there exists a classical BCH code with param- 
eters [n, n — m[(5 — 1)(1 — 1/g)] , > 6]q which contains its dual code. By Corollary 111.21 
an [n, k, d]q code that contains its dual code implies the existence of the quantum code with 
parameters [[n, 2k — n,> d]]q. The purity follows from Lemma IX.12 by which the dual 
distance > ^max + 1 > S. □ 

Before we can construct quantum codes via the Hermitian construction, we will need 
the following lemma. 
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Lemma IX.19. Suppose that C is a primitive, narrow-sense BCH code of length n — 
g2m _ ^^^^ with designed distance 2 <5 < 5max = — 1)/ (g^™ ^ 1)J> then the 

dual distance > ^max + 1- 

Proof. The proof is analogous to the one of Lemma IX. 12; just keep in mind that the 
defining set Zs is invariant under multiplication by modulo n. □ 

Theorem IX.20. Let m — ordn{q^) > 2 where q is a power of a prime and 2 < S < 
Smax — [n{q"^ — ~ 1)J' then there exists a quantum code with parameters 

[[n,n-2m\{5-l){l-l/q^)l>5]], 

that is pure up to ^max + 1- 

Proof. It follows from Theorems IX. 10 and IX. 14 that there exists a primitive, narrow- 
sense [n, n — 1 — m [(5 — 1) (1 — 1/ g^)] , > S\q2 BCH code that contains its Hermitian dual 
code. By Corollary III. 19 a classical [n, k, d]q2 code that contains its Hermitian dual code 
implies the existence of an [[n, 2k — n,> quantum code. By Lemma IX.19 the quantum 
code is pure to 5max + 1- □ 

In the above theorem, quantum codes can also be constructed when the design distance 
exceeds the given value of 5max, however we do not have exact knowledge of the dimension 
in all those cases, hence we have not included them to keep the theorem precise. 

These are not the only possible families of quantum codes that can be derived from 
BCH codes. As pointed out in [68], we can expand BCH codes over F^i to get codes over 
¥q. Once again the dimension and duality results of BCH codes makes it very easy to 
specify such codes. We will just give one example in the Euclidean case. Similar results 
can be derived for the Hermitian case. 
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Theorem IX.21. Let m — ordn{(i) where q is a power of a prime and 2 < 5 < Smax, with 

Sms. = ^^^(^'^"^/'^ - 1 - - 2)[m odd]), 
then there exists a quantum code with parameters 

[[ln,ln-2lm\{5-l){l-l/q')],>5]]g 

that is pure up to 5. 

Proof. By Theorem IX. 18 there exists a quantum BCH code with parameters [[n,n — 
2m\{5 — 1)(1 — ) ^ ^]]q'- [[i^:k,d]]qi quantum code imphes the existence of the 
quantum code with parameters [[In, Ik, > d]]q by Lemma III.41 and the code follows. □ 

E. Conclusions 

In this chapter we have identified the classes of BCH codes that contain their Euclidean 
(Hermitian) duals by a careful analysis of the cyclotomic cosets. In the process we have 
been able to shed more light on the structure of dual containing BCH codes. We were 
able to derive a formula for the dimension of narrow-sense BCH codes when the designed 
distance is small. These results allowed us to identify easily which classical BCH codes 
can be used for construct quantum codes. Further, the parameters of these quantum codes 
are easily specified in terms of the design distance. 
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